<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: changyou</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2017-17553: The Dolphin Browser for Android 12.0.2 suffers from an insecure parsing implementation of the Intent URI schem</title><link>https://patchthecve.com/cve/CVE-2017-17553.html</link><guid>https://patchthecve.com/cve/CVE-2017-17553.html</guid><pubDate>Wed, 17 Jun 2026 01:11:14 +0000</pubDate><description>MEDIUM 5.3: The Dolphin Browser for Android 12.0.2 suffers from an insecure parsing implementation of the Intent URI scheme. This vulnerability could allow attackers to abuse this implementation through a malicious Intent URI, in order to invoke private Activities within the Dolphin Browser.</description></item><item><title>CVE-2017-17551: The Backup and Restore feature in Mobotap Dolphin Browser for Android 12.0.2 suffers from an arbitrary file wr</title><link>https://patchthecve.com/cve/CVE-2017-17551.html</link><guid>https://patchthecve.com/cve/CVE-2017-17551.html</guid><pubDate>Wed, 17 Jun 2026 01:11:14 +0000</pubDate><description>HIGH 8.8: The Backup and Restore feature in Mobotap Dolphin Browser for Android 12.0.2 suffers from an arbitrary file write vulnerability when attempting to restore browser settings from a malicious Dolphin Browser backup file. This arbitrary file write vulnerability allows an attacker to overwrite a specific</description></item><item><title>CVE-2017-8936: The MoboTap Dolphin Web Browser - Fast Private Internet Search app 9.23.0 through 9.23.2 for iOS does not veri</title><link>https://patchthecve.com/cve/CVE-2017-8936.html</link><guid>https://patchthecve.com/cve/CVE-2017-8936.html</guid><pubDate>Wed, 17 Jun 2026 01:27:13 +0000</pubDate><description>MEDIUM 5.9: The MoboTap Dolphin Web Browser - Fast Private Internet Search app 9.23.0 through 9.23.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.</description></item></channel></rss>