https://vulnogram.org/ Most recent CVEs assigned by Vivo Mobile Communication Co., Ltd. (vivo). https://vulnogram.org/seaview/icons/vivo.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-15366 https://vulnogram.org/CVE-2026-15366 A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page Low Wed, 26 Aug 2026 06:46:54 GMT https://vulnogram.org/CVE-2026-15365 https://vulnogram.org/CVE-2026-15365 A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification and use Quick Apps outside the app. Low Wed, 26 Aug 2026 06:45:35 GMT https://vulnogram.org/CVE-2026-12058 https://vulnogram.org/CVE-2026-12058 The connection confirmation pop-up of a specific feature in the PcSuite can be bypassed. Medium Fri, 12 Jun 2026 08:02:02 GMT https://vulnogram.org/CVE-2026-11535 https://vulnogram.org/CVE-2026-11535 An unauthorized access vulnerability exists in the PcSuite APP. The vulnerability can be exploited by attackers to Unauthorized access to the victim’s device. Critical Fri, 12 Jun 2026 08:00:50 GMT https://vulnogram.org/CVE-2025-15515 https://vulnogram.org/CVE-2025-15515 The authentication mechanism for a specific feature in the EasyShare module contains a vulnerability. If specific conditions are met on a local network, it can cause data leakage Medium Fri, 13 Mar 2026 06:43:50 GMT https://vulnogram.org/CVE-2025-15567 https://vulnogram.org/CVE-2025-15567 Insufficient protection mechanisms in the Health Module may lead to partial information disclosure. Medium Fri, 27 Feb 2026 06:54:29 GMT https://vulnogram.org/CVE-2025-15509 https://vulnogram.org/CVE-2025-15509 The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage. High Network Exploitable Fri, 27 Feb 2026 06:52:34 GMT https://vulnogram.org/CVE-2025-5719 https://vulnogram.org/CVE-2025-5719 The wallet has an authentication bypass vulnerability that allows access to specific pages. Medium Fri, 06 Jun 2025 03:40:33 GMT https://vulnogram.org/CVE-2024-46941 https://vulnogram.org/CVE-2024-46941 SystemUI has an incorrect component protection setting, which allows access to specific information. Medium Fri, 06 Jun 2025 03:24:32 GMT https://vulnogram.org/CVE-2024-13186 https://vulnogram.org/CVE-2024-13186 The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage. High Network Exploitable Wed, 08 Jan 2025 08:28:21 GMT https://vulnogram.org/CVE-2024-13185 https://vulnogram.org/CVE-2024-13185 The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage. High Network Exploitable Wed, 08 Jan 2025 08:08:12 GMT https://vulnogram.org/CVE-2024-13173 https://vulnogram.org/CVE-2024-13173 The health module has insufficient restrictions on loading URLs, which may lead to some information leakage. High Network Exploitable Wed, 08 Jan 2025 07:44:48 GMT https://vulnogram.org/CVE-2021-26281 https://vulnogram.org/CVE-2021-26281 Some parameters of the alarm clock module are improperly stored, leaking some sensitive information. Medium Tue, 17 Dec 2024 06:37:53 GMT https://vulnogram.org/CVE-2021-26280 https://vulnogram.org/CVE-2021-26280 Locally installed application can bypass the permission check and perform system operations that require permission. High Tue, 17 Dec 2024 06:27:22 GMT https://vulnogram.org/CVE-2021-26279 https://vulnogram.org/CVE-2021-26279 Some parameters of the weather module are improperly stored, leaking some sensitive information. Medium Tue, 17 Dec 2024 03:34:42 GMT https://vulnogram.org/CVE-2021-26278 https://vulnogram.org/CVE-2021-26278 The wifi module exposes the interface and has improper permission control, leaking sensitive information about the device. Medium Tue, 17 Dec 2024 03:05:03 GMT https://vulnogram.org/CVE-2020-12487 https://vulnogram.org/CVE-2020-12487 Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands with root privilege. High Tue, 17 Dec 2024 02:53:22 GMT https://vulnogram.org/CVE-2020-12484 https://vulnogram.org/CVE-2020-12484 When using special mode to connect to enterprise wifi, certain options are not properly configured and attackers can pretend to be enterprise wifi through a carefully constructed wifi with the same name, which can lead to man-in-the-middle attacks. Medium Tue, 17 Dec 2024 02:36:45 GMT https://vulnogram.org/CVE-2024-46939 https://vulnogram.org/CVE-2024-46939 The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files Low Thu, 28 Nov 2024 03:26:28 GMT https://vulnogram.org/CVE-2020-12492 https://vulnogram.org/CVE-2020-12492 Improper handling of WiFi information by framework services can allow certain malicious applications to obtain sensitive information. Low Mon, 25 Nov 2024 10:11:30 GMT https://vulnogram.org/CVE-2020-12491 https://vulnogram.org/CVE-2020-12491 Improper control of framework service permissions with possibility of some sensitive device information leakage. Medium Mon, 25 Nov 2024 10:08:14 GMT https://vulnogram.org/CVE-2021-26277 https://vulnogram.org/CVE-2021-26277 The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions. Medium Fri, 17 Feb 2023 00:00:00 GMT https://vulnogram.org/CVE-2020-12488 https://vulnogram.org/CVE-2020-12488 The attacker can access the sensitive information stored within the jovi Smart Scene module by entering carefully constructed commands without requesting permission. Medium Wed, 10 Nov 2021 15:49:58 GMT https://vulnogram.org/CVE-2020-12483 https://vulnogram.org/CVE-2020-12483 The appstore before 8.12.0.0 exposes some of its components, and the attacker can cause remote download and install apps through carefully constructed parameters. High Network Exploitable Tue, 23 Mar 2021 16:15:00 GMT https://vulnogram.org/CVE-2020-12485 https://vulnogram.org/CVE-2020-12485 The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which caused out of the boundary when memory access.The vulnerability eventually leads to a local DOS on the device. Medium Tue, 10 Nov 2020 15:31:38 GMT