CVE-2025-27388: Oppo Health App

High severity, CVSS 8.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.

Affected products

• Oppo Oppo Health App

Published 2025-08-14. Last modified 2026-06-17.