# cve.now: Vivo

The newest entries naming Vivo as an affected vendor (up to 200), of 26 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-89229](https://cve.now/CVE-2026-89229.md): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM Copilot… (CVSS 5.1)
- [CVE-2026-15366](https://cve.now/CVE-2026-15366.md): A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page (CVSS 2.4)
- [CVE-2026-15365](https://cve.now/CVE-2026-15365.md): A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification and use Quick Apps outside the app. (CVSS 2.4)
- [CVE-2026-12058](https://cve.now/CVE-2026-12058.md): The connection confirmation pop-up of a specific feature in the PcSuite can be bypassed. (CVSS 5.3)
- [CVE-2026-11535](https://cve.now/CVE-2026-11535.md): An unauthorized access vulnerability exists in the PcSuite APP. (CVSS 9.4)
- [CVE-2025-15515](https://cve.now/CVE-2025-15515.md): The authentication mechanism for a specific feature in the EasyShare module contains a vulnerability. (CVSS 6.9)
- [CVE-2025-15567](https://cve.now/CVE-2025-15567.md): Insufficient protection mechanisms in the Health Module may lead to partial information disclosure. (CVSS 5.1)
- [CVE-2025-15509](https://cve.now/CVE-2025-15509.md): The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage. (CVSS 7.1)
- [CVE-2025-5719](https://cve.now/CVE-2025-5719.md): The wallet has an authentication bypass vulnerability that allows access to specific pages. (CVSS 5.1)
- [CVE-2024-46941](https://cve.now/CVE-2024-46941.md): SystemUI component protection settings vulnerability (CVSS 4.8)
- [CVE-2024-13186](https://cve.now/CVE-2024-13186.md): MinigameCenter information leakage vulnerability (CVSS 6.3)
- [CVE-2024-13185](https://cve.now/CVE-2024-13185.md): MinigameCenter module information leakage vulnerability (CVSS 6.3)
- [CVE-2024-13173](https://cve.now/CVE-2024-13173.md): Health information leakage vulnerability (CVSS 6.3)
- [CVE-2021-26281](https://cve.now/CVE-2021-26281.md): Information disclosure vulnerability in Alarm clock module (CVSS 5.5)
- [CVE-2021-26280](https://cve.now/CVE-2021-26280.md): Permission bypass vulnerability in permission manager module (CVSS 7.9)
- [CVE-2021-26279](https://cve.now/CVE-2021-26279.md): Information disclosure vulnerability in Weather module (CVSS 5.9)
- [CVE-2021-26278](https://cve.now/CVE-2021-26278.md): Sensitive information leakage vulnerability in wifi module (CVSS 6.3)
- [CVE-2020-12487](https://cve.now/CVE-2020-12487.md): Command Execution Vulnerability in ABE service (CVSS 7.0)
- [CVE-2020-12484](https://cve.now/CVE-2020-12484.md): When using special mode to connect to enterprise wifi, certain options are not properly configured and attackers can pretend to be enterpris (CVSS 6.4)
- [CVE-2024-46939](https://cve.now/CVE-2024-46939.md): Game Extension Engine Path Traversal Vulnerability (CVSS 2.4)
- [CVE-2020-12492](https://cve.now/CVE-2020-12492.md): Wifi information acquisition vulnerability in Framework Services (CVSS 1.0)
- [CVE-2020-12491](https://cve.now/CVE-2020-12491.md): Framework Information Disclosure Vulnerability (CVSS 4.8)
- [CVE-2021-26277](https://cve.now/CVE-2021-26277.md): Security Advisory | PendingIntent hijacking vulnerability in Framework Services (CVSS 5.6)
- [CVE-2020-12488](https://cve.now/CVE-2020-12488.md): Broken Access Control Vulnerability in Jovi Smart Scene (CVSS 5.5)
- [CVE-2020-12483](https://cve.now/CVE-2020-12483.md): AppStore Remote Download and Installation Vulnerability (CVSS 8.2)
- [CVE-2020-12485](https://cve.now/CVE-2020-12485.md): The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which caused out of the bou (CVSS 5.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/vivo
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.