Known Vulnerabilities for products from Tencent

Listed below are 20 of the newest known vulnerabilities associated with the vendor "Tencent".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-31924 json Not Provided 2026-04-14 2026-04-14
CVE-2026-30856 json WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.0, ... Not Provided 2026-03-07 2026-04-13
CVE-2026-5585 json Not Provided 2026-04-05 2026-04-06
CVE-2025-41118 json Not Provided 2026-04-15 2026-04-20
CVE-2023-52286 json 7.5 - HIGH 2023-12-31 2024-01-05
CVE-2023-40829 json There is an interface unauthorized access vulnerability in the background of Tencent Enterprise Wechat Privatization 2.5.x an... 7.5 - HIGH 2023-10-12 2023-10-24
CVE-2023-39988 json Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in 标准云(std.Cloud) WxSync plugin <= 2.7.23 version... 5.4 - MEDIUM 2023-09-04 2023-11-07
CVE-2023-34312 json In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers... 7.8 - HIGH 2023-06-01 2023-06-08
CVE-2023-30363 json vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in c... 9.8 - CRITICAL 2023-04-26 2023-05-05
CVE-2022-35158 json A vulnerability in the lua parser of TscanCode tsclua v2.15.01 allows attackers to cause a Denial of Service (DoS) via a craf... 7.5 - HIGH 2022-08-03 2022-08-10
CVE-2021-40180 json ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 7.5 - HIGH 2022-07-26 2022-08-04
CVE-2021-33879 json Tencent GameLoop before 4.1.21.90 downloaded updates over an insecure HTTP connection. A malicious attacker in an MITM positi... 8.1 - HIGH 2021-06-06 2021-06-15
CVE-2021-33057 json ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 7.5 - HIGH 2022-07-26 2022-08-04
CVE-2021-27439 json ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 9.8 - CRITICAL 2022-05-03 2022-05-12
CVE-2021-27247 json This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat 2.9.... 6.5 - MEDIUM 2021-04-14 2021-04-22
CVE-2020-27874 json This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User... 8.8 - HIGH 2021-02-10 2021-10-18
CVE-2020-24162 json The Shenzhen Tencent app 5.8.2.5300 for PC platforms (from Tencent App Center) has a DLL hijacking vulnerability. Attackers c... 7.8 - HIGH 2020-09-03 2020-09-10
CVE-2020-24160 json Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to exe... 7.8 - HIGH 2020-09-03 2021-07-21
CVE-2020-10551 json QQBrowser before 10.5.3870.400 installs a Windows service TsService.exe. This file is writable by anyone belonging to the NT ... 7.8 - HIGH 2020-04-09 2021-07-21
CVE-2019-17151 json This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat... 5.4 - MEDIUM 2020-01-07 2020-01-14

Known software with vulnerabilities from Tencent

Type Vendor Product Version
ApplicationTencentFoxmail1.1
ApplicationTencentHabomalhunter2.0.0.2
ApplicationTencentQqbrowser-
ApplicationTencentRapidjson1.0
ApplicationTencentTencent5.8.2.5300
ApplicationTencentTim3.0.0.21315
ApplicationTencentWechat6.3.18
ApplicationTencentWechat Pay-