What’s Vulnerable › Vulnerabilities

CVE-2019-10251

• Severity: medium (CVSS 5.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-03-28 · updated 2026-06-17
• Weakness: CWE-319

Description

The UCWeb UC Browser application through 2019-03-26 for Android uses HTTP to download certain modules associated with PDF and Microsoft Office files (related to libpicsel), which allows MITM attacks.

Affected products

• UCWeb UC Browser: through 2019-03-26

References

• https://news.drweb.com/show/?i=13176&c=38
• https://www.bleepingcomputer.com/news/security/uc-browser-for-android-desktop-exposes-500-million-users-to-mitm-attacks/
• https://news.drweb.com/show/?i=13176&c=38
• https://www.bleepingcomputer.com/news/security/uc-browser-for-android-desktop-exposes-500-million-users-to-mitm-attacks/

Get alerted when CVE-2019-10251 or the next vulnerability affects your stack