CVE-2019-12828

CVE-2019-12828 is a critical remote code execution vulnerability affecting Electronic Arts Origin versions prior to 10.5.39. It stems from improper sanitization of URI schemes, allowing attackers to inject arguments and load malicious Qt plugins from a remote network share. With a CVSS score of 8.8 (High), this vulnerability is easily exploitable over a network with low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. While not observed in active exploitation (KEV list), public exploit code is available on ExploitDB, though community discussion and media coverage remain low.