Maxthon

10 CVEs across 3 Maxthon products. Browse Maxthon vulnerabilities, severities, and proof-of-concept exploits.

Maxthon products with known CVEs

ProductCVEs
Maxthon Browser5
Maxthon4
Maxthon Cloud Browser1
Maxthon CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2019-16647High7.22019-10-29Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows.
CVE-2014-14492014-12-25The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses the…
CVE-2010-52462012-09-07Multiple untrusted search path vulnerabilities in Maxthon Browser 1.6.7.35 and 2.5.15 allow local users to gain privileges via a Trojan horse (1) RSRC32.dll or…
CVE-2009-30182009-08-31Maxthon Browser 3.0.0.145 Alpha with Ultramode does not properly block javascript: and data: URIs in Refresh headers in HTTP responses, which allows remote att…
CVE-2009-30062009-08-28Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web sit…
CVE-2008-36672008-08-13Stack-based buffer overflow in Maxthon Browser 2.0 and earlier allows remote attackers to execute arbitrary code via a long Content-type HTTP header.
CVE-2006-69852007-02-09Cross-domain vulnerability in Maxthon 1.5.6 build 42 allows remote attackers to access restricted information from other domains via an object tag with a data…
CVE-2005-10912005-05-02Maxthon 1.2.0 and 1.2.1 allows remote attackers to bypass the security ID and use restricted plugin API functions via script that includes the max.src file int…
CVE-2005-10902005-05-02Directory traversal vulnerability in the readFile and writeFile API for Maxthon 1.2.0 and 1.2.1 allows remote attackers to read or write arbitrary files.
CVE-2005-09052005-05-02Maxthon 1.2.0 allows remote malicious web sites to obtain potentially sensitive data from the search bar via the m2_search_text property.