CVE-2025-27389CWE-290

CVE-2025-27389

published December 5, 2025

CVSS
5.1
EPSS
0%
Percentile
2.5
In the wild
Unconfirmed
What it is

A flaw exists in the verification of application installation sources within ColorOS. Under specific conditions, this issue may cause the risk detection mechanism to fail, which could allow malicious applications to be installed without proper warning.

The record
Technical detail
CVSS
5.1 · NONE
CVSS v4.0
Not supplied
EPSS
0.00131 · 2.5th percentile
Weakness
CWE-290 · Authentication Bypass by Spoofing
Published
2025-12-05T09:16Z
References (1)
EPSS history
Timeline
  • 05 DEC 03:19Z
    Application Installation Source Verification Flaw May Lead to Risk Detection Bypass
    cvelistv5