Mi vulnerabilities1 known to be exploited.
Mi has 96 published vulnerabilities across 146 products in our catalogue. 1 of them is on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Miui, with 9. If you run Mi software, patch the exploited flaws first.
The most recent Mi flaw added to the known-exploited list is CVE-2018-6065, on 8 June 2022. We keep watching the known-exploited list.
Which Mi products have the most vulnerabilities?
Miui leads with 9 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Mi vulnerabilities are being exploited?
1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 8.8Google Chromium V8 Integer Overflow Vulnerability
Google Chromium V8 Engine contains an integer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Which Mi flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 60%
Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via...
- 56%CVE-2019-18371High
An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable.
- 40%CVE-2019-18370Critical
An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable.
- 24%CVE-2018-16130High
System command injection in request_mitv in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary system commands via the "payload" URL parameter.
- 24%CVE-2018-13023High
System command injection vulnerability in wifi_access in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute system commands via the "timeout" URL parameter.
- 19%CVE-2023-26315Medium
The Xiaomi router AX9000 has a post-authentication command injection vulnerability.
- 10%CVE-2018-20523Medium
Xiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones allows content provider injection.
- 7.5%CVE-2020-14125High
A denial of service vulnerability exists in some Xiaomi models of phones.
- 5.6%CVE-2020-14100Critical
In Xiaomi router R3600 ROM version<1.0.66, filters in the set_WAN6 interface can be bypassed, causing remote code execution.
All Mi products we track.
35 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Miuimiui9 vulnerabilities6 versions
- Ax3600 Firmwareax3600_firmware6 vulnerabilities4 versions
- Xiaomi R3600 Firmwarexiaomi_r3600_firmware5 vulnerabilities2 versions
- Ax1800 Firmwareax1800_firmware4 vulnerabilities1 version
- Mi Browsermi_browser4 vulnerabilities98 versions
- Rm1800 Firmwarerm1800_firmware4 vulnerabilities1 version
- Miwifi OSmiwifi_os3 vulnerabilities1 version
- Redmi 6 Firmwareredmi_6_firmware3 vulnerabilities1 version
- Getappsgetapps2 vulnerabilities3 versions
- Mi App Storemi_app_store2 vulnerabilities1 version
- Mi6 Browsermi6_browser2 vulnerabilities1 version
- Millet Router 3g Firmwaremillet_router_3g_firmware2 vulnerabilities1 version
- Miui Firmwaremiui_firmware2 vulnerabilities1 version
- Xiaomi Router Firmwarexiaomi_router_firmware2 vulnerabilities1 version
- Xiaomi Xiaoai Speaker Pro Lx06 Firmwarexiaomi_xiaoai_speaker_pro_lx06_firmware2 vulnerabilities2 versions
- App Marketapp_market1 vulnerability2 versions
- Ax6000 Firmwareax6000_firmware1 vulnerability1 version
- File Managerfile_manager1 vulnerability1 version
- M365m3651 vulnerability1 version
- M365 Firmwarem365_firmware1 vulnerability1 version
- Mdz-25-Dt Firmwaremdz-25-dt_firmware1 vulnerability2 versions
- Mi A2 Lite Firmwaremi_a2_lite_firmware1 vulnerability1 version
- Mi Mix 2 Firmwaremi_mix_2_firmware1 vulnerability1 version
- Mijia Inkjet Printer Firmwaremijia_inkjet_printer_firmware1 vulnerability1 version
This directory lists the 35 Mi products with at least one tracked version, of 146 in our catalogue.
Running Mi? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Google Chromium V8 Engine contains an integer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
- Matched to
- Mi on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 96 published vulnerabilities across 146 products and 190 versions from Mi. The most recent Mi flaw added to the known-exploited list is CVE-2018-6065, on 8 June 2022.
1 Mi vulnerability is on the list of flaws known to be exploited. The most recently added is CVE-2018-6065. The full list is on this page.
Miui, with 9 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Mi products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.