Ea Origin — known CVE vulnerabilities

Every CVE whose affected-product data names Ea Origin, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2019-12828 — CVSS 8.8 (high): An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and origin2:// URI schemes…
• CVE-2019-11354 — CVSS 7.8 (high): The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler…
• CVE-2019-19247 — CVSS 7.8 (high): Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 1 of 2).
• CVE-2019-19248 — CVSS 7.8 (high): Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 2 of 2).
• CVE-2019-19741 — CVSS 7.8 (high): Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation, a different…
• CVE-2020-27708 — CVSS 7.8 (high): A vulnerability exists in the Origin Client that could allow a non-Administrative user to elevate their access to either Administrator or…