https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2014-5849.htmlhttps://patchthecve.com/cve/CVE-2014-5849.htmlWed, 17 Jun 2026 00:12:11 +0000MEDIUM 5.4: The Maleficent Free Fall (aka com.disney.maleficent_goo) application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.https://patchthecve.com/cve/CVE-2014-5607.htmlhttps://patchthecve.com/cve/CVE-2014-5607.htmlWed, 17 Jun 2026 00:11:46 +0000MEDIUM 5.4: The Where's My Water? Free (aka com.disney.WMWLite) application 1.9.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.https://patchthecve.com/cve/CVE-2014-5606.htmlhttps://patchthecve.com/cve/CVE-2014-5606.htmlWed, 17 Jun 2026 00:11:46 +0000MEDIUM 5.4: The Where's My Perry? Free (aka com.disney.WMPLite) application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.