Vivo
27 CVEs across 27 Vivo products. Browse Vivo vulnerabilities, severities, and proof-of-concept exploits.
Vivo products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-12058 | | 2026-06-12 | The connection confirmation pop-up of a specific feature in the PcSuite can be bypassed. | |
CVE-2026-11535 | | 2026-06-12 | An unauthorized access vulnerability exists in the PcSuite APP. The vulnerability can be exploited by attackers to Unauthorized access to the victim’s device. | |
CVE-2025-15515 | Medium | 5.5 | 2026-03-13 | The authentication mechanism for a specific feature in the EasyShare module contains a vulnerability. If specific conditions are met on a local network, it can… |
CVE-2025-15567 | Low | 3.3 | 2026-02-27 | Insufficient protection mechanisms in the Health Module may lead to partial information disclosure. |
CVE-2025-15509 | Medium | 4.3 | 2026-02-27 | The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage. |
CVE-2025-5719 | | 2025-06-06 | The wallet has an authentication bypass vulnerability that allows access to specific pages. | |
CVE-2024-46941 | | 2025-06-06 | SystemUI has an incorrect component protection setting, which allows access to specific information. | |
CVE-2024-13186 | High | 7.5 | 2025-01-08 | The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage. |
CVE-2024-13185 | High | 7.5 | 2025-01-08 | The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage. |
CVE-2024-13173 | High | 7.5 | 2025-01-08 | The health module has insufficient restrictions on loading URLs, which may lead to some information leakage. |
CVE-2021-26281 | Medium | 5.5 | 2024-12-17 | Some parameters of the alarm clock module are improperly stored, leaking some sensitive information. |
CVE-2021-26280 | High | 7.9 | 2024-12-17 | Locally installed application can bypass the permission check and perform system operations that require permission. |
CVE-2021-26279 | Medium | 5.9 | 2024-12-17 | Some parameters of the weather module are improperly stored, leaking some sensitive information. |
CVE-2021-26278 | Medium | 6.3 | 2024-12-17 | The wifi module exposes the interface and has improper permission control, leaking sensitive information about the device. |
CVE-2020-12487 | High | 7.0 | 2024-12-17 | Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands w… |
CVE-2020-12484 | Medium | 6.4 | 2024-12-17 | When using special mode to connect to enterprise wifi, certain options are not properly configured and attackers can pretend to be enterprise wifi through a ca… |
CVE-2024-46939 | | 2024-11-28 | The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, wh… | |
CVE-2020-12492 | | 2024-11-25 | Improper handling of WiFi information by framework services can allow certain malicious applications to obtain sensitive information. | |
CVE-2020-12491 | | 2024-11-25 | Improper control of framework service permissions with possibility of some sensitive device information leakage. | |
CVE-2021-26277 | Medium | 5.6 | 2023-02-17 | The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions. |
CVE-2020-12488 | Medium | 5.5 | 2021-11-10 | The attacker can access the sensitive information stored within the jovi Smart Scene module by entering carefully constructed commands without requesting permi… |
CVE-2020-12483 | High | 8.2 | 2021-03-23 | The appstore before 8.12.0.0 exposes some of its components, and the attacker can cause remote download and install apps through carefully constructed paramete… |
CVE-2020-12485 | Medium | 5.5 | 2020-11-10 | The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which caused out of the boundary when memory a… |
CVE-2018-15000 | Medium | 6.3 | 2019-04-25 | The Vivo V7 Android device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys contains a platform app with a package name… |
CVE-2018-15002 | Medium | 4.7 | 2018-12-28 | The Vivo V7 device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys allows any app co-located on the device to set syst… |
CVE-2018-15001 | Medium | 5.5 | 2018-12-28 | The Vivo V7 Android device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys contains a platform app with a package name… |
CVE-2017-17463 | High | 7.5 | 2017-12-08 | Vivo modems allow remote attackers to obtain sensitive information by reading the index.cgi?page=wifi HTML source code, as demonstrated by ssid and psk_wepkey… |