CVE Tools
Track your stack

Oppo

7 CVEs tracked since 2020. Since Nov 2020, none of them reached CISA KEV.

Oppo CVEs per month

Nov 2020 to Dec 2020. Point at a month, or focus the strip and use the arrow keys.
Oppo CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2020-1130
2020-1240

Products

The products that kept showing up in Oppo's monthly top three, with their CVEs summed over those months.

  1. Find X2 Pro Firmware41 month
  2. RENO3 Pro Firmware41 month
  3. Coloros11 month
  4. Ovoicemanager11 month
  5. Qualityprotect11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Oppo.

  1. CVE-2026-22072Arbitrary URL Loading in WebView Leading to Token Leakage Risk—
  2. CVE-2026-22078O+ Connect's lack of authentication for IPC channels led to a local privilege escalation vulnerability.7.3
  3. CVE-2026-22070ColorOS Assistant Path Traversal Vulnerability7.1
  4. CVE-2026-22077Sensitive Information Disclosure Vulnerability Caused by Trusted Domain Bypass in OPPO Wallet—
  5. CVE-2025-27388Arbitrary URL Loading in WebView Leading to Token Leakage Risk—
  6. CVE-2025-27387OPPO Clone Phone uses weak WPA passphrase as only means of security7.4
  7. CVE-2024-1609OPPO Store APP has a WebView component privilege escalation vulnerability.—
  8. CVE-2024-1610OPPO Store app include remote account token hijacking and sensitive information leakage9.8
  9. CVE-2024-1608OPPO Usercenter Credit sdk9.1
  10. CVE-2023-26311 A remote code execution vulnerability in the webview component of OPPO Store app.7.4
  11. CVE-2023-26309A remote code execution vulnerability in the webview component7.4
  12. CVE-2023-26310Command Injection In OPPO Service7.4
  13. CVE-2021-23247A command injection vulerability found in quick game engine allows arbitrary remote code in quick app. Allows remote attacke0rs to gain arbitrary code execution in quick game engine9.8
  14. CVE-2021-23246In ACE2 ColorOS11, the attacker can obtain the foreground package name through permission promotion, resulting in user information disclosure.7.5
  15. CVE-2021-23244ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some apps in whitelist is not installed, attacker can disguise app with the sa...7.8

The record

Peak rank
#115 in Nov 2020
Busiest month shown
Dec 2020, 4 CVEs
Months with a KEV entry
0 since Nov 2020
Monthly snapshots
2 since 2020
Oppo's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store