Vendor
Tencent
70 known vulnerabilities in products by Tencent, 0 of them actively exploited (CISA KEV).
Key figures
70
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
10
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-30861 | WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation | 10.0 | |
| Critical | CVE-2026-22688 | WeKnora has Command Injection in MCP stdio test | 10.0 | |
| High | CVE-2018-11616 | Tencent Foxmail: OS Command Injection | 8.8 | |
| Critical | CVE-2026-89040 | Tencent Mass Service Engine in Cluster (MSEC) path traversal | 9.8 | |
| Medium | CVE-2021-27247 | Tencent WeChat: Out-of-bounds Read | 6.5 | |
| High | CVE-2020-27874 | Tencent WeChat: Improper Restriction of Operations within the Bounds of a Memory Buffer | 8.8 | |
| Critical | CVE-2026-72565 | Tencent APIJSON - Unauthenticated SQL Injection via @having Operator Map-Form Bypass | 9.8 | |
| Medium | CVE-2019-11419 | Tencent WeChat: Denial of Service | 5.5 | |
| High | CVE-2018-13439 | Tencent WeChat Pay: XML External Entity (XXE) | 7.5 | |
| Critical | CVE-2024-33078 | Tencent Libpag: Buffer Overflow | 9.8 | |
| Critical | CVE-2026-30860 | WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool | 10.0 | |
| High | CVE-2024-40433 | Tencent WeChat: Privilege Escalation | 8.8 | |
| Critical | CVE-2021-27439 | TencentOS-tiny Integer Overflow or Wraparound | 7.3 | |
| Critical | CVE-2023-30363 | Tencent Vconsole: security vulnerability | 9.8 | |
| High | CVE-2020-10551 | Tencent Qqbrowser: Privilege Escalation | 7.8 | |
| High | CVE-2021-40180 | Tencent WeChat: Information Disclosure | 7.5 | |
| High | CVE-2021-33057 | Tencent Qq: security vulnerability | 7.5 | |
| High | CVE-2026-84809 | Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode | 6.5 | |
| High | CVE-2021-33879 | Tencent Gameloop: security vulnerability | 8.1 | |
| High | CVE-2026-91750 | WeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirects | 6.5 | |
| Medium | CVE-2026-5585 | Tencent AI-Infra-Guard Task Detail Endpoint task_manager.go information disclosure | 5.3 | |
| High | CVE-2026-116620 | Tencent RapidJSON Regex stream.h Take out-of-bounds | 7.3 | |
| High | CVE-2019-13125 | Tencent HaboMalHunter: security vulnerability | 7.8 | |
| High | CVE-2023-52286 | Tencent Distributed SQL: security vulnerability | 7.5 | |
| High | CVE-2025-13713 | Tencent Hunyuan3D-1: Deserialization of Untrusted Data | 7.8 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 31sans-atrisk-mail,
Products
| Tencent WeKnora | 15 | 0 |
| Tencent WeChat | 6 | 0 |
| Ncnn | 3 | 0 |
| Tencent AI-Infra-Guard | 3 | 0 |
| Tencent RapidJSON | 3 | 0 |