Browse CVEs

CRITICAL 9.8 CVE-2021-27439 TencentOS-tiny version 3.1.0 is vulnerable to integer wrap-around in function 'tos_mmheap_alloc incorrect calculation of effective memory allocation … Tencentos Tiny Mitigation only Fix from $2,3002022-05-03 HIGH 8.1 CVE-2021-33879 Tencent GameLoop before 4.1.21.90 downloaded updates over an insecure HTTP connection. A malicious attacker in an MITM position could spoof the conte… Gameloop 4.1.21.90+ Fix from $1,9502021-06-06 MEDIUM 6.5 CVE-2021-27247EPSS 6% This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat 2.9.5 desktop version. User … Wechat Mitigation only Fix from $1,6002021-04-14 HIGH 8.8 CVE-2020-27874 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required… Wechat Mitigation only Fix from $1,9502021-02-10 HIGH 7.8 CVE-2020-24160 Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code. Tim Mitigation only Fix from $1,9502020-09-03 HIGH 7.8 CVE-2020-24162 The Shenzhen Tencent app 5.8.2.5300 for PC platforms (from Tencent App Center) has a DLL hijacking vulnerability. Attackers can use this vulnerabilit… Tencent Mitigation only Fix from $1,9502020-09-03 HIGH 7.8 CVE-2020-10551 QQBrowser before 10.5.3870.400 installs a Windows service TsService.exe. This file is writable by anyone belonging to the NT AUTHORITY\Authenticated … Qqbrowser 10.5.3870.400+ Fix from $1,9502020-04-09 MEDIUM 5.4 CVE-2019-17151 This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat Prior to 7.0.9. User in… Wechat 7.0.9+ Fix from $1,6002020-01-07 HIGH 7.8 CVE-2019-13125 HaboMalHunter through 2.0.0.3 in Tencent Habo allows attackers to evade dynamic malware analysis via PIE compilation. Habomalhunter after 2.0.0.3 Fix from $1,9502019-07-01 MEDIUM 5.5 CVE-2019-11419 vcodec2_hls_filter in libvoipCodec_v7a.so in the WeChat application through 7.0.3 for Android allows attackers to cause a denial of service (applicat… Wechat after 7.0.3 Fix from $1,6002019-05-14 HIGH 8.8 CVE-2018-11616 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Tencent Foxmail 7.2.9.115. User interaction is re… Foxmail Mitigation only Fix from $1,9502018-08-30 HIGH 7.5 CVE-2018-13439 WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL. Wechat Pay No fix yet Fix from $1,9502018-07-08 MEDIUM 5.8 CVE-2011-4863 The Tencent QQPimSecure (com.tencent.qqpimsecure) application 3.0.2 for Android does not properly protect data, which allows remote attackers to read… Qqpimsecure Mitigation only Fix from $1,6002012-01-25 MEDIUM 5.8 CVE-2011-4864 The Tencent MobileQQ (com.tencent.mobileqq) application 2.2 for Android does not properly protect data, which allows remote attackers to read or modi… Mobileqq Mitigation only Fix from $1,6002012-01-25 MEDIUM 5.8 CVE-2011-4865 The Tencent WBlog (com.tencent.WBlog) 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attacke… Microblogpad Mitigation only Fix from $1,6002012-01-25 MEDIUM 5.8 CVE-2011-4867 The Tencent QQPhoto (com.tencent.qqphoto) application 0.97 for Android does not properly protect data, which allows remote attackers to read or modif… Qqpphoto Mitigation only Fix from $1,6002012-01-25