vivo

Products

Exploited and recent CVEs

• CVE-2026-89229 Medium 5.1 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM Copilot (com.vivo.ai.copilot) allows a malicious application installed on the sa 0.2%
• CVE-2026-15366 Low 2.4 A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page 0.2%
• CVE-2026-15365 Low 2.4 A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification and use Quick Apps outside the app. 0.2%
• CVE-2026-12058 Medium 5.3 The connection confirmation pop-up of a specific feature in the PcSuite can be bypassed. 0.2%
• CVE-2026-11535 Critical 9.4 An unauthorized access vulnerability exists in the PcSuite APP. The vulnerability can be exploited by attackers to Unauthorized access to the victim’s device. 0.2%
• CVE-2025-15515 Medium 6.9 The authentication mechanism for a specific feature in the EasyShare module contains a vulnerability. If specific conditions are met on a local network, it can cause data leakage 0.2%
• CVE-2025-15567 Medium 5.1 Insufficient protection mechanisms in the Health Module may lead to partial information disclosure. 0.1%
• CVE-2025-15509 High 7.1 The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage. 0.3%
• CVE-2025-5719 Medium 5.1 The wallet has an authentication bypass vulnerability that allows access to specific pages. 0.2%
• CVE-2024-46941 Medium 4.8 SystemUI component protection settings vulnerability 0.2%
• CVE-2024-13186 High 7.5 MinigameCenter information leakage vulnerability 0.4%
• CVE-2024-13185 High 7.5 MinigameCenter module information leakage vulnerability 0.4%
• CVE-2024-13173 High 7.5 Health information leakage vulnerability 0.4%
• CVE-2021-26281 Medium 5.5 Information disclosure vulnerability in Alarm clock module 0.2%
• CVE-2021-26280 High 7.9 Permission bypass vulnerability in permission manager module 0.2%
• CVE-2021-26279 Medium 5.9 Information disclosure vulnerability in Weather module 0.2%
• CVE-2021-26278 Medium 6.3 Sensitive information leakage vulnerability in wifi module 0.2%
• CVE-2020-12487 High 7.0 Command Execution Vulnerability in ABE service 0.3%
• CVE-2020-12484 Medium 6.4 When using special mode to connect to enterprise wifi, certain options are not properly configured and attackers can pretend to be enterprise wifi through a carefully constructed wifi with the same na 0.2%
• CVE-2024-46939 Low 2.4 Game Extension Engine Path Traversal Vulnerability 0.2%
• CVE-2020-12492 Low 1.0 Wifi information acquisition vulnerability in Framework Services 0.2%
• CVE-2020-12491 Medium 4.8 Framework Information Disclosure Vulnerability 0.2%
• CVE-2021-26277 Medium 5.6 Security Advisory | PendingIntent hijacking vulnerability in Framework Services 0.3%
• CVE-2020-12488 Medium 5.5 Broken Access Control Vulnerability in Jovi Smart Scene 0.2%
• CVE-2020-12483 High 8.2 AppStore Remote Download and Installation Vulnerability 0.7%
• CVE-2020-12485 Medium 5.5 The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which caused out of the boundary when memory access.The vulnerability eventually leads 0.3%