Oppo vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20233
3. 20243
4. 20252
5. 20264

Newest CVEs

• CVE-2026-22072

  Arbitrary URL Loading in WebView Leading to Token Leakage Risk

  OPPO · OPPO Health

  High8.3
• CVE-2026-22078

  O+ Connect's lack of authentication for IPC channels led to a local privilege escalation vulnerability.

  OPPO · O+ Connect

  High7.3
• CVE-2026-22070

  ColorOS Assistant Path Traversal Vulnerability

  OPPO · ColorOS Assistant

  High7.1
• CVE-2026-22077

  Sensitive Information Disclosure Vulnerability Caused by Trusted Domain Bypass in OPPO Wallet

  OPPO · OPPO Wallet APP

  Medium5.6
• CVE-2025-27388

  Arbitrary URL Loading in WebView Leading to Token Leakage Risk

  OPPO · OPPO HEALTH APP

  High8.3
• CVE-2025-27387

  OPPO Clone Phone uses weak WPA passphrase as only means of security

  OPPO · ColorOS

  High7.4
• CVE-2024-1609

  OPPO Store APP has a WebView component privilege escalation vulnerability.

  OPPO · OPPP Store

  High8.7
• CVE-2024-1610

  OPPO Store app include remote account token hijacking and sensitive information leakage

  OPPO · OPPO Store APP

  High8.7
• CVE-2024-1608

  OPPO Usercenter Credit sdk

  OPPO · Usercenter Credit sdk

  Critical9.1
• CVE-2023-26311

  A remote code execution vulnerability in the webview component of OPPO Store app.

  OPPO · OPPO Store

  High7.4