Tencent vulnerabilities
43 published CVEs name Tencent among the affected products.
- Published CVEs
- 43
- Last 12 months
- 36
- Critical
- 5
- Known exploited
- 0
Critical 5High 18Medium 19Low 1Not scored 0
CVEs per yearBy the year they were published
- 20181
- 20201
- 20212
- 20242
- 202512
- 202625
Newest CVEs
- CVE-2026-118376
WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 Addresses
Tencent · WeKnora
Medium6.0 - CVE-2026-116620
Tencent RapidJSON Regex stream.h Take out-of-bounds
Tencent · RapidJSON
Medium6.9 - CVE-2026-112074
Tencent ncnn Conversion API mat_pixel.cpp yuv420sp2rgb integer overflow
Tencent · ncnn
Medium5.3 - CVE-2026-112073
Tencent ncnn MatMul matmul.cpp matmul_transb out-of-bounds
Tencent · ncnn
Medium5.3 - CVE-2026-108821
Tencent WeKnora SQL Validator inject.go validateSubquery sql injection
Tencent · WeKnora
Medium5.3 - CVE-2026-101080
Tencent AI-Infra-Guard File Access dir_actions.py startsWith path traversal
Tencent · AI-Infra-Guard
Low2.4 - CVE-2026-94111
Tencent BrowserSkill through 0.3.0 Origin Validation Error in Local WebSocket Daemon
Tencent · BrowserSkill
Medium6.9 - CVE-2026-89040
Tencent Mass Service Engine in Cluster (MSEC) path traversal
Tencent · Mass Service Engine in Cluster (MSEC)
Critical9.3 - CVE-2026-91750
WeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirects
Tencent · WeKnora
High7.1 - CVE-2026-84809
Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode
Tencent · AI-Infra-Guard
High7.1
Products with the most CVEs
Most common weaknesses
- CWE-502 Deserialization of untrusted data11
- CWE-918 Server-side request forgery (SSRF)5
- CWE-89 SQL injection4
- CWE-119 Memory buffer bounds error3
- CWE-125 Out-of-bounds read3
- CWE-284 Improper access control3
- CWE-190 Integer overflow2
- CWE-22 Path traversal2
- CWE-639 Authorization bypass through a user-controlled key (IDOR)2
- CWE-78 OS command injection2