Vulnerabilities in OPPO
13 resultsCVE-2020-11828—In ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position/services/surfaceflinger surfaceflinger.CPP), REPSS 1.2%CVE-2023-26310HIGHCommand Injection In OPPO ServiceEPSS 1.1%CVE-2023-26309HIGHA remote code execution vulnerability in the webview componentEPSS 0.8%CVE-2023-26311HIGH A remote code execution vulnerability in the webview component of OPPO Store app.EPSS 0.8%CVE-2024-1610HIGHOPPO Store app include remote account token hijacking and sensitive information leakageEPSS 0.7%CVE-2024-1609HIGHOPPO Store APP has a WebView component privilege escalation vulnerability.EPSS 0.5%CVE-2024-1608CRITICALOPPO Usercenter Credit sdkEPSS 0.5%CVE-2025-27388HIGHArbitrary URL Loading in WebView Leading to Token Leakage RiskEPSS 0.4%CVE-2026-22072HIGHArbitrary URL Loading in WebView Leading to Token Leakage RiskEPSS 0.4%CVE-2025-27387HIGHOPPO Clone Phone uses weak WPA passphrase as only means of securityEPSS 0.3%CVE-2026-22070HIGHColorOS Assistant Path Traversal VulnerabilityEPSS 0.2%CVE-2026-22078HIGHO+ Connect's lack of authentication for IPC channels led to a local privilege escalation vulnerability.EPSS 0.1%CVE-2026-22077MEDIUMSensitive Information Disclosure Vulnerability Caused by Trusted Domain Bypass in OPPO WalletEPSS 0.1%