Oculus vulnerabilities
3 vulnerabilities
Known vulnerabilities in Oculus products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Desktop2 vulnerabilities
- Oculus Browser1 vulnerabilities
CVE-2021-24038facebookoculus desktop+1
EPSS score0.20%
Due to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a privileged process handle to an unprivileged process, leading to local privilege escalation. This issue affects Oculus Desktop versions after 1.39 and prior to 31.1.0.67.507.CVE-2020-1885facebookoculus desktop+1EPSS score0.42%
Writing to an unprivileged file from a privileged OVRRedir.exe process in Oculus Desktop before 1.44.0.32849 on Windows allows local users to write to arbitrary files and consequently gain privileges via vectors involving a hard link to a log file.CVE-2019-3562oculusoculus_browserEPSS score1.10%
A remote web page could inject arbitrary HTML code into the Oculus Browser UI, allowing an attacker to spoof UI and potentially execute code. This affects the Oculus Browser starting from version 5.2.7 until 5.7.11.