Vulnerabilidades de Oppo
CVEs publicadas que afetam produtos de Oppo: 3 registro(s), com severidade, exploração e correções.
CVE-2026-22078
Alta · 7.3
CWE-266 29/06/2026
O+ Connect's lack of authentication for IPC channels led to a local privilege escalation vulnerability.
Because O+ Connect's IPC service does not authenticate clients, external applications can escalate privileges and perform sensitive actions through the IPC channel.
CVE-2026-22070
Crítica · 9.8
CWE-22 30/04/2026
ColorOS Assistant Path Traversal Vulnerability
ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal.
CVE-2026-22077
Média · 5.6
CWE-346 27/04/2026
Sensitive Information Disclosure Vulnerability Caused by Trusted Domain Bypass in OPPO Wallet
OPPO Wallet APP contains a trusted domain validation flaw that allows attackers to bypass protected interface access restrictions, which may lead to account token hijacking and sensitive information disclosure.