VULNERABILITY INTELLIGENCE
CVE-2025-27388
EPSS probability0.39%
CISA KEVNot currently listed
Published2025-08-14
Last modified2026-06-17
Description
Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.
Weakness classification
- security@oppo.com: CWE-20