Oppo vulnerabilities
Published CVEs affecting Oppo products: 3 record(s), with severity, exploitation and fixes.
CVE-2026-22078
High · 7.3
CWE-266 Jun 29, 2026
O+ Connect's lack of authentication for IPC channels led to a local privilege escalation vulnerability.
Because O+ Connect's IPC service does not authenticate clients, external applications can escalate privileges and perform sensitive actions through the IPC channel.
CVE-2026-22070
Critical · 9.8
CWE-22 Apr 30, 2026
ColorOS Assistant Path Traversal Vulnerability
ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal.
CVE-2026-22077
Medium · 5.6
CWE-346 Apr 27, 2026
Sensitive Information Disclosure Vulnerability Caused by Trusted Domain Bypass in OPPO Wallet
OPPO Wallet APP contains a trusted domain validation flaw that allows attackers to bypass protected interface access restrictions, which may lead to account token hijacking and sensitive information disclosure.