AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-1939

HIGH · CVSS 7.5 EPSS 1.07%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-03-03 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2014-1939
Severity
HIGH
CVSS
7.5
EPSS
1.07%
Android Java

Original NVD Description

java/android/webkit/BrowserFrame.java in Android before 4.4 uses the addJavascriptInterface API in conjunction with creating an object of the SearchBoxImpl class, which allows attackers to execute arbitrary Java code by leveraging access to the searchBoxJavaBridge_ interface at certain Android API levels.