OPPO

Products

Exploited and recent CVEs

• CVE-2026-22072 High 8.3 Arbitrary URL Loading in WebView Leading to Token Leakage Risk 0.4%
• CVE-2026-22078 High 7.3 O+ Connect's lack of authentication for IPC channels led to a local privilege escalation vulnerability. 0.1%
• CVE-2026-22070 High 7.1 ColorOS Assistant Path Traversal Vulnerability 0.2%
• CVE-2026-22077 Medium 5.6 Sensitive Information Disclosure Vulnerability Caused by Trusted Domain Bypass in OPPO Wallet <0.1%
• CVE-2025-27388 High 8.3 Arbitrary URL Loading in WebView Leading to Token Leakage Risk 0.4%
• CVE-2025-27387 High 7.4 OPPO Clone Phone uses weak WPA passphrase as only means of security 0.3%
• CVE-2024-1609 High 8.7 OPPO Store APP has a WebView component privilege escalation vulnerability. 0.5%
• CVE-2024-1610 Critical 9.8 OPPO Store app include remote account token hijacking and sensitive information leakage 0.7%
• CVE-2024-1608 Critical 9.1 OPPO Usercenter Credit sdk 0.5%
• CVE-2023-26311 High 7.4 A remote code execution vulnerability in the webview component of OPPO Store app. 0.8%
• CVE-2023-26309 High 7.4 A remote code execution vulnerability in the webview component 0.8%
• CVE-2023-26310 High 7.4 Command Injection In OPPO Service 1.1%
• CVE-2020-11828 Unrated In ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position/services/surfaceflinger surfaceflinger.CPP), RGB is defined on the stack but uninitialized, so when the sc 1.2%