CVE-2021-23246: Oppo Coloros

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

In ACE2 ColorOS11, the attacker can obtain the foreground package name through permission promotion, resulting in user information disclosure.

Affected products

• Oppo Coloros: version 11 only

Published 2022-03-11. Last modified 2026-06-17.