Tencent

Records70All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high38CVSS 7.0–8.9

Exploited now

Tencent records in CISA KEV

No Tencent vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Weknora 12 records HIGH Wechat 6 records HIGH Libpag 2 records MEDIUM Qq 2 records HIGH Tface 2 records LOW Tim 2 records HIGH Ai-infra-guard 1 record MEDIUM Blueking Configuration Management Database 1 record LOW

Records

6 records in Wechat · all components

TI-2024-26921 CVE-2024-40433 · GHSA-242w-qmqc-xqm3

Insecure Permissions vulnerability in Tencent wechat v.8.0.37 allows an attacker to…

HIGH 73

Insecure Permissions vulnerability in Tencent wechat v.8.0.37 allows an attacker to escalate privileges via the web-view component.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01175 Published 2024-07-26 No fix listed CWE-266

TI-2020-16942 CVE-2020-27874 · GHSA-6c98-7x6w-rx39

Memory corruption in Tencent WeChat

MEDIUM 42

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02178 Published 2021-02-10 No fix listed CWE-119

TI-2021-08787 CVE-2021-27247 · GHSA-32ww-65cv-cvf4

Out-of-bounds read in Tencent WeChat

LOW 38

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat 2.9.5 desktop version.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.06673 Published 2021-04-14 No fix listed CWE-125

TI-2021-17359 CVE-2021-40180 · GHSA-3mff-x894-pfqr

In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive…

LOW 36

In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01417 Published 2022-07-26 No fix listed CWE-200

TI-2019-08535 CVE-2019-11419 · GHSA-phxr-r4xw-v9q5

vcodec2_hls_filter in libvoipCodec_v7a.so in the WeChat application through 7.0.3 for…

LOW 32

vcodec2_hls_filter in libvoipCodec_v7a.so in the WeChat application through 7.0.3 for Android allows attackers to cause a denial of service (application crash) by replacing an emoji file (under the /sdcard/tencent/MicroM…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.04025 Published 2019-05-14 No fix listed CWE-476

TI-2019-12800 CVE-2019-17151 · GHSA-92mc-7g43-2wj6

Open redirect in Tencent WeChat

LOW 27

This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat Prior to 7.0.9.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.01374 Published 2020-01-07 Fixed in 7.0.9 CWE-356

Open these records in search →

Critical	9
High	38
Medium	22
Low	1
No CVSS	0