Vivo

Latest CVEs · RSS

• CVE-2026-15366 2026-08-26 · CVSS 2.4
  A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page
• CVE-2026-15365 2026-08-26 · CVSS 2.4
  A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification and use Quick Apps outside the app.
• CVE-2026-12058 2026-06-12 · CVSS 5.3
  The connection confirmation pop-up of a specific feature in the PcSuite can be bypassed.
• CVE-2026-11535 2026-06-12 · CVSS 9.4
  An unauthorized access vulnerability exists in the PcSuite APP. The vulnerability can be exploited by attackers to Unauthorized access to the victim’s device.
• CVE-2025-15515 2026-03-13 · CVSS 6.9
  The authentication mechanism for a specific feature in the EasyShare module contains a vulnerability. If specific conditions are met on a local network, it can
• CVE-2025-15567 2026-02-27 · CVSS 5.1
  Insufficient protection mechanisms in the Health Module may lead to partial information disclosure.
• CVE-2025-15509 2026-02-27 · CVSS 7.1
  The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage.
• CVE-2025-5719 2025-06-06 · CVSS 5.1
  The wallet has an authentication bypass vulnerability that allows access to specific pages.
• CVE-2024-46941 2025-06-06 · CVSS 4.8
  SystemUI has an incorrect component protection setting, which allows access to specific information.
• CVE-2024-13186 2025-01-08 · CVSS 6.3
  The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage.
• CVE-2024-13185 2025-01-08 · CVSS 6.3
  The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage.
• CVE-2024-13173 2025-01-08 · CVSS 6.3
  The health module has insufficient restrictions on loading URLs, which may lead to some information leakage.
• CVE-2021-26281 2024-12-17 · CVSS 5.5
  Some parameters of the alarm clock module are improperly stored, leaking some sensitive information.
• CVE-2021-26280 2024-12-17 · CVSS 7.9
  Locally installed application can bypass the permission check and perform system operations that require permission.
• CVE-2021-26279 2024-12-17 · CVSS 5.9
  Some parameters of the weather module are improperly stored, leaking some sensitive information.
• CVE-2021-26278 2024-12-17 · CVSS 6.3
  The wifi module exposes the interface and has improper permission control, leaking sensitive information about the device.
• CVE-2020-12487 2024-12-17 · CVSS 7.0
  Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands wi
• CVE-2020-12484 2024-12-17 · CVSS 6.4
  When using special mode to connect to enterprise wifi, certain options are not properly configured and attackers can pretend to be enterprise wifi through a car
• CVE-2024-46939 2024-11-28 · CVSS 2.4
  The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, whi
• CVE-2020-12492 2024-11-25 · CVSS 1.0
  Improper handling of WiFi information by framework services can allow certain malicious applications to obtain sensitive information.
• CVE-2020-12491 2024-11-25 · CVSS 4.8
  Improper control of framework service permissions with possibility of some sensitive device information leakage.
• CVE-2021-26277 2023-02-17 · CVSS 5.6
  The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions.
• CVE-2020-12488 2021-11-10 · CVSS 5.5
  The attacker can access the sensitive information stored within the jovi Smart Scene module by entering carefully constructed commands without requesting permis
• CVE-2020-12483 2021-03-23 · CVSS 8.2
  The appstore before 8.12.0.0 exposes some of its components, and the attacker can cause remote download and install apps through carefully constructed parameter
• CVE-2020-12485 2020-11-10 · CVSS 5.5
  The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which caused out of the boundary when memory ac