CVE-2021-40180: Tencent Wechat

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts.

Affected products

• Tencent Wechat: version 8.0.10 only

Published 2022-07-26. Last modified 2026-06-17.