What’s Vulnerable › Vulnerabilities
CVE-2025-27389: Application Installation Source Verification Flaw May Lead to Risk Detection Bypass
- Severity: medium (CVSS 5.1 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-12-05 · updated 2026-09-25
- Weakness: CWE-290
Description
A flaw exists in the verification of application installation sources within ColorOS. Under specific conditions, this issue may cause the risk detection mechanism to fail, which could allow malicious applications to be installed without proper warning.
Affected products
- ColorOS: ColorOS 11–15
References
Get alerted when CVE-2025-27389 or the next vulnerability affects your stack