Xiaomi vulnerabilities
26 CVEs and advisories name Xiaomi as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-45347Mi Connect Service APP protocol flaws lead to unauthorized access
- CVE-2024-45361Mi Connect Service APP protocol flaws lead to leaking sensitive user information
- CVE-2024-45356Xiaomi phone framework has unauthorized access vulnerability
- CVE-2024-45355Xiaomi phone framework has unauthorized access vulnerability
- CVE-2024-45354xiaomi shop application Webview has code execution vulnerability
- CVE-2024-45353quick App has intent redriction vulnerability
- CVE-2024-45352Xiaomi smarthome application Webview has code execution vulnerability
- CVE-2024-45351Game center application has code execution Vulnerability
- CVE-2024-45348Xiaomi Router AX9000 has a post-authorization command injection vulnerability
- CVE-2023-26322GetApps application has code execution vulnerability
- CVE-2023-26323Xiaomi App Market has a code execution vulnerability
- CVE-2023-26321The international version of Xiaomi File Manager has a path traversal vulnerability
- CVE-2023-26324GetApps application has code execution vulnerability
- CVE-2024-45346GetApps application has code execution vulnerability
- CVE-2023-26315Xiaomi router has a command injection vulnerability after authorization
- CVE-2024-4406Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability
- CVE-2024-4405Xiaomi Pro 13 mimarket manual-upgrade Cross-Site Scripting Remote Code Execution Vulnerability
- CVE-2023-26320Xiaomi Router external request interface vulnerability leads to stack overflow
- CVE-2023-26319Xiaomi Router administration interface vulnerability leads command injection and stack overflow
- CVE-2023-26318Xiaomi router web interface post-authorization stack overflow
- CVE-2023-26317Xiaomi router external request interface has command injection
- CVE-2020-14094In Xiaomi router R3600, ROM version<1.0.20, the connection service can be injected through the web interface, resulting in stack overflow or
- CVE-2020-14095In Xiaomi router R3600, ROM version<1.0.20, a connect service suffers from an injection vulnerability through the web interface, leading to
- CVE-2019-13322This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Browser Prior to 10.4.0.
- CVE-2019-13321This vulnerability allows network adjacent attackers to execute arbitrary code on affected installations of Xiaomi Browser Prior to 10.4.0.
- CVE-2019-6743This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Mi6 Browser prior to 10.4.0.