CVE-2019-13321

CVE-2019-13321 is a high-severity vulnerability affecting Xiaomi Browser prior to version 10.4.0, specifically within its handling of HTTP responses to the Captive Portal. An attacker can exploit this by setting up a malicious access point, causing the browser to open a specified URL without user interaction, which can then be chained with other vulnerabilities for arbitrary code execution. The CVSS score of 8.0 (High) reflects its network-adjacent attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.