Login Request a demo
TE
Vendor
Tencent
43 products with CVEs on record
71
CVEs
0
On KEV
5
New 30D
Products
WE
WeKnora
Tencent
9.8
15 CVEs0 on KEV2 new
NC
ncnn
Tencent
7.1
3 CVEs0 on KEV2 new
RA
RapidJSON
Tencent
7.3
1 CVEs0 on KEV1 new
WE
Wechat
Tencent
8.8
6 CVEs0 on KEV0 new
AI
AI-Infra-Guard
Tencent
7.5
3 CVEs0 on KEV0 new
HU
HunyuanDiT
Tencent
7.8
2 CVEs0 on KEV0 new
LI
Libpag
Tencent
9.8
2 CVEs0 on KEV0 new
QQ
QQ
Tencent
7.8
2 CVEs0 on KEV0 new
TF
TFace
Tencent
7.8
2 CVEs0 on KEV0 new
TI
Tim
Tencent
7.8
2 CVEs0 on KEV0 new
AI
aig-skill-scan
Tencent
6.5
1 CVEs0 on KEV0 new
AP
APIJSON
Tencent
9.8
1 CVEs0 on KEV0 new
BC
Blueking Configuration Management Database
Tencent
8.1
1 CVEs0 on KEV0 new
BR
BrowserSkill
Tencent
6.6
1 CVEs0 on KEV0 new
DO
Docs
Tencent
7.5
1 CVEs0 on KEV0 new
EW
Enterprise Wechat Privatization
Tencent
7.5
1 CVEs0 on KEV0 new
FA
FaceDetection-DSFD
Tencent
7.8
1 CVEs0 on KEV0 new
FO
Foxmail
Tencent
8.8
1 CVEs0 on KEV0 new
GA
Gameloop
Tencent
8.1
1 CVEs0 on KEV0 new
HA
Habomalhunter
Tencent
7.8
1 CVEs0 on KEV0 new
HU
Hunyuan3D-1
Tencent
7.8
1 CVEs0 on KEV0 new
HU
HunyuanVideo
Tencent
7.8
1 CVEs0 on KEV0 new
IO
Ioa
Tencent
7.4
1 CVEs0 on KEV0 new
MS
Mass Service Engine in Cluster (MSEC)
Tencent
9.8
1 CVEs0 on KEV0 new
ME
MedicalNet
Tencent
7.8
1 CVEs0 on KEV0 new
MI
Microblogpad
Tencent
–
1 CVEs0 on KEV0 new
MI
MimicMotion
Tencent
7.8
1 CVEs0 on KEV0 new
MO
Mobileqq
Tencent
–
1 CVEs0 on KEV0 new
NE
NeuralNLP-NeuralClassifier
Tencent
7.8
1 CVEs0 on KEV0 new
PA
PatrickStar
Tencent
7.8
1 CVEs0 on KEV0 new
PM
PC Manager
Tencent
7.0
1 CVEs0 on KEV0 new
PC
Pcmanager
Tencent
7.4
1 CVEs0 on KEV0 new
QQ
Qqbrowser
Tencent
7.8
1 CVEs0 on KEV0 new
QQ
Qqpimsecure
Tencent
–
1 CVEs0 on KEV0 new
QQ
Qqpphoto
Tencent
–
1 CVEs0 on KEV0 new
TE
Tencent
Tencent
7.8
1 CVEs0 on KEV0 new
TD
Tencent Distributed Sql
Tencent
7.5
1 CVEs0 on KEV0 new
TE
Tencentos-tiny
Tencent
9.8
1 CVEs0 on KEV0 new
TS
Tscancode
Tencent
7.5
1 CVEs0 on KEV0 new
VC
Vconsole
Tencent
9.8
1 CVEs0 on KEV0 new
WB
Wblog
Tencent
–
1 CVEs0 on KEV0 new
WP
Wechat Pay
Tencent
7.5
1 CVEs0 on KEV0 new
WX
Wxsync
Tencent
5.4
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-118376
New
WE
WeKnora
Tencent
5.3–Oct 28WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 Addresses
CVE-2026-116620
New
RA
RapidJSON
Tencent
7.3
0%
Oct 27Tencent RapidJSON Regex stream.h Take out-of-bounds
CVE-2026-112074
NC
ncnn
Tencent
6.3
0%
Oct 19Tencent ncnn Conversion API mat_pixel.cpp yuv420sp2rgb integer overflow
CVE-2026-112073
NC
ncnn
Tencent
6.3
0%
Oct 19Tencent ncnn MatMul matmul.cpp matmul_transb out-of-bounds
CVE-2026-108821
WE
WeKnora
Tencent
6.3
0%
Oct 12Tencent WeKnora SQL Validator inject.go validateSubquery sql injection
CVE-2026-101080
AI
AI-Infra-Guard
Tencent
4.8
0%
Sep 28Tencent AI-Infra-Guard File Access dir_actions.py startsWith path traversal
CVE-2026-94111
BR
BrowserSkill
Tencent
6.6
0%
Sep 20Tencent BrowserSkill through 0.3.0 Origin Validation Error in Local WebSocket Daemon
CVE-2026-89040
MS
Mass Service Engine in Cluster (MSEC)
Tencent
9.8
1%
Sep 15Tencent Mass Service Engine in Cluster (MSEC) path traversal
CVE-2026-91750
WE
WeKnora
Tencent
6.5
0%
Sep 15WeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirects
CVE-2026-84809
AI
AI-Infra-Guard
Tencent
6.5
1%
Sep 2Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode
CVE-2026-72565
AP
APIJSON
Tencent
9.8
1%
Aug 10Tencent APIJSON - Unauthenticated SQL Injection via @having Operator Map-Form Bypass
CVE-2026-50144
NC
ncnn
Tencent
7.1
0%
Jul 15ncnn: Out-of-bounds heap write in ParamDict::load_param via unchecked negative parameter id
CVE-2026-15515
PM
PC Manager
Tencent
7.0
0%
Jul 13Tencent PC Manager QMUDisk Driver qmudisk64.sys uncontrolled search path
CVE-2026-8786
WE
WeKnora
Tencent
6.3
0%
May 18Tencent WeKnora Config API Endpoint initialization.go getKnowledgeBaseForInitialization authorization
CVE-2026-5585
AI
AI-Infra-Guard
Tencent
7.5
1%
Apr 5Tencent AI-Infra-Guard Task Detail Endpoint task_manager.go information disclosure
CVE-2026-30861
WE
WeKnora
Tencent
8.8
2%
Mar 7WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation
CVE-2026-30860
WE
WeKnora
Tencent
9.8
1%
Mar 7WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool
CVE-2026-30859
WE
WeKnora
Tencent
6.5
0%
Mar 7WeKnora: Broken Access Control - Cross-Tenant Data Exposure
CVE-2026-30858
WE
WeKnora
Tencent
7.5
0%
Mar 7WeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal Resources
CVE-2026-30857
WE
WeKnora
Tencent
5.3
0%
Mar 7WeKnora: Unauthorized Cross‑Tenant Knowledge Base Cloning
CVE-2026-30856
WE
WeKnora
Tencent
7.6
0%
Mar 7WeKnora: Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection
CVE-2026-30855
WE
WeKnora
Tencent
8.8
0%
Mar 7WeKnora: Broken Access Control in Tenant Management
CVE-2026-30247
WE
WeKnora
Tencent
7.5
0%
Mar 7WeKnora: SSRF via Redirection
CVE-2025-63946
PC
Pcmanager
Tencent
7.4
0%
Feb 23A privilege escalation (PE) vulnerability in the Tencent PC Manager app thru 17.10.28554.205 on Windows devices enables a local user to execute programs with elevated privileges
CVE-2025-63945
IO
Ioa
Tencent
7.4
0%
Feb 23A privilege escalation (PE) vulnerability in the Tencent iOA app thru 210.9.28693.621001 on Windows devices enables a local user to execute programs with elevated privileges
CVE-2026-22688
WE
WeKnora
Tencent
8.8
2%
Jan 10WeKnora has Command Injection in MCP stdio test
CVE-2026-22687
WE
WeKnora
Tencent
9.8
0%
Jan 10WeKnora vulnerable to SQL Injection
CVE-2025-13715
FA
FaceDetection-DSFD
Tencent
7.8
0%
Dec 23Tencent FaceDetection-DSFD resnet Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2025-13709
TF
TFace
Tencent
7.8
1%
Dec 23Tencent TFace restore_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2025-13711
TF
TFace
Tencent
7.8
1%
Dec 23Tencent TFace eval Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2025-13706
PA
PatrickStar
Tencent
7.8
1%
Dec 23Tencent PatrickStar merge_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2025-13708
NE
NeuralNLP-NeuralClassifier
Tencent
7.8
1%
Dec 23Tencent NeuralNLP-NeuralClassifier _load_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2025-13716
MI
MimicMotion
Tencent
7.8
1%
Dec 23Tencent MimicMotion create_pipeline Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2025-13714
ME
MedicalNet
Tencent
7.8
1%
Dec 23Tencent MedicalNet generate_model Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2025-13710
HU
HunyuanVideo
Tencent
7.8
1%
Dec 23Tencent HunyuanVideo load_vae Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2025-13707
HU
HunyuanDiT
Tencent
7.8
1%
Dec 23Tencent HunyuanDiT model_resume Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2025-13712
HU
HunyuanDiT
Tencent
7.8
1%
Dec 23Tencent HunyuanDiT merge Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2025-13713
HU
Hunyuan3D-1
Tencent
7.8
1%
Dec 23Tencent Hunyuan3D-1 load_pretrained Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2025-56230
DO
Docs
Tencent
7.5
0%
Nov 4Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component
CVE-2025-11046
WE
Weknora
Tencent
9.8
0%
Sep 26A security flaw has been discovered in Tencent WeKnora 0.1.0
CVE-2024-40433
WE
Wechat
Tencent
8.8
1%
Jul 26Insecure Permissions vulnerability in Tencent wechat v.8.0.37 allows an attacker to escalate privileges via the web-view component
CVE-2024-34408
LI
Libpag
Tencent
5.3
0%
May 3Tencent libpag through 4.3.51 has an integer overflow in DecodeStream::checkEndOfFile() in codec/utils/DecodeStream.cpp via a crafted PAG (Portable Animated Graphics) file
CVE-2024-33078
LI
Libpag
Tencent
9.8
1%
May 1Tencent Libpag v4.3 is vulnerable to Buffer Overflow
CVE-2024-22873
BC
Blueking Configuration Management Database
Tencent
8.1
1%
Feb 26Tencent Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery (SSRF) via the event subscription function (/service/subscription.go)
CVE-2023-52286
TD
Tencent Distributed Sql
Tencent
7.5
1%
Dec 31Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.php/api/install/get_db_info request, a related issue to…
CVE-2023-40829
EW
Enterprise Wechat Privatization
Tencent
7.5
1%
Oct 12There is an interface unauthorized access vulnerability in the background of Tencent Enterprise Wechat Privatization 2.5.x and 2.6.930000
CVE-2023-39988
WX
Wxsync
Tencent
5.4
0%
Sep 4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in 标准云(std.Cloud) WxSync plugin <= 2.7.23 versions
CVE-2023-34312
QQ
QQ
Tencent
7.8
1%
Jun 1In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-process communication, which leads to a…
CVE-2023-30363
VC
Vconsole
Tencent
9.8
1%
Apr 26vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts
CVE-2022-35158
TS
Tscancode
Tencent
7.5
1%
Aug 3A vulnerability in the lua parser of TscanCode tsclua v2.15.01 allows attackers to cause a Denial of Service (DoS) via a crafted lua script
CVE-2021-40180
WE
Wechat
Tencent
7.5
1%
Jul 26In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts
CVE-2021-33057
QQ
QQ
Tencent
7.5
1%
Jul 26The QQ application 8.7.1 for Android and iOS does not enforce the permission requirements (e.g., android.permission.ACCESS_FINE_LOCATION) for determining the device's physical…
CVE-2021-27439
TE
Tencentos-tiny
Tencent
9.8
2%
May 3TencentOS-tiny version 3.1.0 is vulnerable to integer wrap-around in function 'tos_mmheap_alloc incorrect calculation of effective memory allocation size
CVE-2021-33879
GA
Gameloop
Tencent
8.1
1%
Jun 6Tencent GameLoop before 4.1.21.90 downloaded updates over an insecure HTTP connection
CVE-2021-27247
WE
Wechat
Tencent
6.5
6%
Apr 14This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat 2.9.5 desktop version
CVE-2020-27874
WE
Wechat
Tencent
8.8
2%
Feb 10This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18
CVE-2020-24162
TE
Tencent
Tencent
7.8
0%
Sep 3The Shenzhen Tencent app 5.8.2.5300 for PC platforms (from Tencent App Center) has a DLL hijacking vulnerability
CVE-2020-24160
TI
Tim
Tencent
7.8
0%
Sep 3Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code
CVE-2020-10551
QQ
Qqbrowser
Tencent
7.8
1%
Apr 9QQBrowser before 10.5.3870.400 installs a Windows service TsService.exe
CVE-2019-17151
WE
Wechat
Tencent
5.4
1%
Jan 7This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat Prior to 7.0.9