Lucene search
K

52 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:21 a.m.3 views

CVE-2021-27247

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat 2.9.5 desktop version. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

6.5CVSS6AI score0.01442EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-7608

Malware in sbrugna...

5.8CVSS4.8AI score0.00871EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-14012

Malware in sbrugna...

6.5CVSS6.6AI score0.01442EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-20367

Malware in sbrugna...

8.8CVSS8.8AI score0.01203EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 7:28 a.m.4 views

CVE-2024-40433

Insecure Permissions vulnerability in Tencent wechat v.8.0.37 allows an attacker to escalate privileges via the web-view component...

8.8CVSS7.1AI score0.00159EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:3 a.m.3 views

CVE-2019-17151

This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat Prior to 7.0.9. User interaction is required to exploit this vulnerability in that the target must be within a chat session together with the attacker. The specific flaw...

5.8CVSS6.7AI score0.00871EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 2:59 p.m.4 views

CVE-2020-27874

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

8.8CVSS6.8AI score0.01203EPSS
Exploits0
Talos Blog
Talos Blog
added 2024/09/06 10:0 a.m.49 views

Vulnerability in Tencent WeChat custom browser could lead to remote code execution

Certain versions of WeChat, a popular messaging app created by tech giant Tencent, contain a type confusion vulnerability that could allow an adversary to execute remote code. While this issue, CVE-2023-3420, was disclosed and patched in the V8 engine in June 2023, the WeChat Webview component wa...

8.8CVSS8.9AI score0.046EPSS
Exploits0
CNVD
CNVD
added 2024/07/31 12:0 a.m.5 views

Unspecified Vulnerability in Tencent WeChat (CNVD-2025-06512)

Tencent WeChat 微信 is an online social networking application from the Chinese company Tencent. The program supports sending voice messages, videos, pictures, and text, among other things. An unspecified vulnerability exists in Tencent WeChat. An attacker can exploit the vulnerability to elevate...

8.8CVSS6.8AI score0.00159EPSS
Exploits1References1
NVD
NVD
added 2024/07/26 10:15 p.m.16 views

CVE-2024-40433

Insecure Permissions vulnerability in Tencent wechat v.8.0.37 allows an attacker to escalate privileges via the web-view component...

8.8CVSS0.00159EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/07/26 12:0 a.m.12 views

CVE-2024-40433

Insecure Permissions vulnerability in Tencent wechat v.8.0.37 allows an attacker to escalate privileges via the web-view component...

7.3AI score0.00159EPSS
Exploits1References1
CVE
CVE
added 2024/07/26 12:0 a.m.51 views

CVE-2024-40433

CVE-2024-40433 affects Tencent WeChat 8.0.37. Multiple connected sources describe an Insecure Permissions vulnerability that enables privilege escalation via the web-view component. Root cause and scope are tied to the web-view usage in WeChat, with impact described as elevation of privileges (hi...

8.8CVSS7.1AI score0.00159EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2024/07/26 12:0 a.m.10 views

CVE-2024-40433

Insecure Permissions vulnerability in Tencent wechat v.8.0.37 allows an attacker to escalate privileges via the web-view component...

0.00159EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/07/26 12:0 a.m.4 views

PT-2024-28846 · Tencent · Tencent Wechat

Name of the Vulnerable Software and Affected Versions: Tencent WeChat version 8.0.37 Description: The issue allows an attacker to escalate privileges via the web-view component. Recommendations: For version 8.0.37, at the moment, there is no information about a newer version that contains a fix f...

8.8CVSS7.1AI score0.00159EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2023/10/12 5:15 a.m.1 views

CVE-2023-40829

There is an interface unauthorized access vulnerability in the background of Tencent Enterprise Wechat Privatization 2.5.x and 2.6.930000...

7.5CVSS5.8AI score0.00082EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/10/12 12:0 a.m.2 views

Tencent WeChat Security Breach

Tencent WeChat 微信 is an online social networking application from the Chinese company Tencent. The program supports sending voice messages, videos, pictures, and texts. A security vulnerability exists in Tencent Wechat Privatization version 2.5.x and version 2.6.930000, which stems from the...

7.5CVSS6.8AI score0.00082EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2022/08/23 12:0 a.m.16 views

(0Day) Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

4.3CVSS1.7AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.13 views

Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

4.3CVSS1.7AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.114 views

Tencent WeChat WXAM Decoder Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM decoder. T...

8.8CVSS3.9AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/14 12:0 a.m.15 views

Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

4.3CVSS1.7AI score
Exploits0
Rows per page
Query Builder