How severe is CVE-2019-19248?

CVE-2019-19248 has a CVSS 3.x base score of 7.8, rated high severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2019-19248 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (31st percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2019-19248?

CVE-2019-19248 primarily affects Ea Origin. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2019-19248?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2019-19248 published?

CVE-2019-19248 was published on 2019-12-12 and last updated on 2026-06-17.

CVE-2019-19248

CVE-2019-19248 is a high-severity vulnerability in Ea Origin with a CVSS 3.x base score of 7.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 3.x base score 7.8)
CVSS v2: 7.2
EPSS exploit prediction: 0% (31st percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Ea Origin
Published: 2019-12-12
Last modified: 2026-06-17

Description

Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 2 of 2).

Frequently asked questions

What is CVE-2019-19248?: Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 2 of 2).
How severe is CVE-2019-19248?: CVE-2019-19248 has a CVSS 3.x base score of 7.8, rated high severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2019-19248 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (31st percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2019-19248?: CVE-2019-19248 primarily affects Ea Origin. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2019-19248?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2019-19248 published?: CVE-2019-19248 was published on 2019-12-12 and last updated on 2026-06-17.

References

https://www.ea.com/security/news/easec-2019-001-elevation-of-privilege-vulnerability-in-origin-client

Affected products (2)

cpe:2.3:a:ea:origin:*:*:*:*:*:macos:*:*
cpe:2.3:a:ea:origin:*:*:*:*:*:windows:*:*

More vulnerabilities in Ea Origin

CVE-2019-12828 — High (CVSS 8.8): An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and…
CVE-2020-27708 — High (CVSS 7.8): A vulnerability exists in the Origin Client that could allow a non-Administrative user to elevate their access to…
CVE-2019-19741 — High (CVSS 7.8): Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL…
CVE-2019-19247 — High (CVSS 7.8): Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 1 of 2).
CVE-2019-11354 — High (CVSS 7.8): The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the…

All CVEs affecting Ea Origin →