Vendor
Xiaomi
101 known vulnerabilities in products by Xiaomi, 1 of them actively exploited (CISA KEV).
Key figures
101
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
24
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2018-6065 | Google Chromium V8 Integer Overflow Vulnerability In CISA KEValso in 5 other products | 8.8 | |
| Critical | CVE-2019-18370 | Mi Millet Router 3G Firmware: Command Injection | 9.8 | |
| High | CVE-2018-16130 | Mi Miwifi OS: Command Injection | 8.8 | |
| High | CVE-2018-13023 | Mi Miwifi OS: Command Injection | 8.8 | |
| Critical | CVE-2020-14100 | Xiaomi router R3600: Remote Code Execution | 9.8 | |
| Critical | CVE-2018-14010 | Mi Xiaomi R3: OS Command Injection | 9.8 | |
| Critical | CVE-2018-14060 | Mi Xiaomi R3d Firmware: OS Command Injection | 9.8 | |
| High | CVE-2019-18371 | Mi Millet Router 3G Firmware: Path Traversal | 7.5 | |
| High | CVE-2023-26315 | Xiaomi router has a command injection vulnerability after authorization | 6.5 | |
| Critical | CVE-2020-14119 | Xiaomi Router AX3600: Command Injection | 9.8 | |
| High | CVE-2020-14125 | Miui: Denial of Service | 7.5 | |
| Critical | CVE-2020-10561 | Mijia Inkjet Printer Firmware: security vulnerability | 9.8 | |
| Critical | CVE-2020-14094 | Xiaomi router R3600: Remote Code Execution | 9.8 | |
| Critical | CVE-2020-14095 | Xiaomi router R3600: Remote Code Execution | 9.8 | |
| Critical | CVE-2024-4406 | Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability | 8.8 | |
| Medium | CVE-2018-20523 | Xiaomi Stock Browser: security vulnerability | 5.3 | |
| Critical | CVE-2020-14124 | Xiaomi Router AX3600: Buffer Overflow | 9.8 | |
| High | CVE-2019-6743 | Xiaomi Browser: Out-of-bounds Write | 7.8 | |
| High | CVE-2019-13322 | Xiaomi Browser: Product UI does not Warn User of Unsafe Actions | 7.5 | |
| Critical | CVE-2020-11960 | Mi Xiaomi R3600 Firmware: Remote Code Execution | 9.8 | |
| High | CVE-2020-14109 | Xiaomi Router AX3600: Command Injection | 7.2 | |
| High | CVE-2018-16307 | Mi Xiaomi Miwifi Xiaomi 55dd Firmware: security vulnerability | 7.5 | |
| Critical | CVE-2019-15913 | Mi Dgnwg03lm Firmware: Denial of Service | 9.8 | |
| Medium | CVE-2019-10875 | Mi Browser: Spoofing | 6.5 | |
| Critical | CVE-2024-4405 | Xiaomi Pro 13 mimarket manual-upgrade Cross-Site Scripting Remote Code Execution Vulnerability | 8.8 |