Vivo vulnerabilities
26 CVEs and advisories name Vivo as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-89229Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM Copilot…
- CVE-2026-15366A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page
- CVE-2026-15365A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification and use Quick Apps outside the app.
- CVE-2026-12058The connection confirmation pop-up of a specific feature in the PcSuite can be bypassed.
- CVE-2026-11535An unauthorized access vulnerability exists in the PcSuite APP.
- CVE-2025-15515The authentication mechanism for a specific feature in the EasyShare module contains a vulnerability.
- CVE-2025-15567Insufficient protection mechanisms in the Health Module may lead to partial information disclosure.
- CVE-2025-15509The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage.
- CVE-2025-5719The wallet has an authentication bypass vulnerability that allows access to specific pages.
- CVE-2024-46941SystemUI component protection settings vulnerability
- CVE-2024-13186MinigameCenter information leakage vulnerability
- CVE-2024-13185MinigameCenter module information leakage vulnerability
- CVE-2024-13173Health information leakage vulnerability
- CVE-2021-26281Information disclosure vulnerability in Alarm clock module
- CVE-2021-26280Permission bypass vulnerability in permission manager module
- CVE-2021-26279Information disclosure vulnerability in Weather module
- CVE-2021-26278Sensitive information leakage vulnerability in wifi module
- CVE-2020-12487Command Execution Vulnerability in ABE service
- CVE-2020-12484When using special mode to connect to enterprise wifi, certain options are not properly configured and attackers can pretend to be enterpris
- CVE-2024-46939Game Extension Engine Path Traversal Vulnerability
- CVE-2020-12492Wifi information acquisition vulnerability in Framework Services
- CVE-2020-12491Framework Information Disclosure Vulnerability
- CVE-2021-26277Security Advisory | PendingIntent hijacking vulnerability in Framework Services
- CVE-2020-12488Broken Access Control Vulnerability in Jovi Smart Scene
- CVE-2020-12483AppStore Remote Download and Installation Vulnerability
- CVE-2020-12485The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which caused out of the bou