vivo vulnerabilities
26 published CVEs name vivo among the affected products.
- Published CVEs
- 26
- Last 12 months
- 8
- Critical
- 1
- Known exploited
- 0
Critical 1High 4Medium 17Low 4Not scored 0
CVEs per yearBy the year they were published
- 20201
- 20212
- 20231
- 20249
- 20255
- 20268
Newest CVEs
- CVE-2026-89229
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM Copilot (com.vivo.ai.copilot) allows a…
vivo · BlueLM Copilot
Medium5.1 - CVE-2026-15366
A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page
vivo · Kids Mode
Low2.4 - CVE-2026-15365
A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification and use Quick Apps outside the app.
vivo · Kids Mode
Low2.4 - CVE-2026-12058
The connection confirmation pop-up of a specific feature in the PcSuite can be bypassed.
vivo · PcSuite
Medium5.3 - CVE-2026-11535
An unauthorized access vulnerability exists in the PcSuite APP. The vulnerability can be exploited by attackers to Unauthorized access to the victim’s device.
vivo · PcSuite
Critical9.4 - CVE-2025-15515
The authentication mechanism for a specific feature in the EasyShare module contains a vulnerability. If specific conditions are met on a local network, it can…
vivo · Easyshare
Medium6.9 - CVE-2025-15567
Insufficient protection mechanisms in the Health Module may lead to partial information disclosure.
vivo · Health
Medium5.1 - CVE-2025-15509
The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage.
vivo · SmartRemote
High7.1 - CVE-2025-5719
The wallet has an authentication bypass vulnerability that allows access to specific pages.
vivo · Wallet
Medium5.1 - CVE-2024-46941
SystemUI component protection settings vulnerability
vivo · SystemUI
Medium4.8
Products with the most CVEs
Most common weaknesses
- CWE-306 Missing authentication for a critical function13
- CWE-200 Exposure of sensitive information2
- CWE-22 Path traversal2
- CWE-125 Out-of-bounds read1
- CWE-20 Improper input validation1
- CWE-281 1
- CWE-284 Improper access control1
- CWE-601 Open redirect1
- CWE-653 1
- CWE-668 Exposure of a resource to the wrong sphere1