Browse all 6 CVE security advisories affecting bytedance. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-96680 | ByteDance Coze Scraper Extension External Message index.js chrome.runtime.onMessageExternal.addListener authorization — Coze Scraper Extension CWE-862 | 4.3 | Medium | 2026-09-23 |
| CVE-2026-81735 | UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Execution — UI-TARS-desktop CWE-306 | 10.0 | Critical | 2026-08-27 |
| CVE-2026-11312 | bytedance InfiniStore KV Map infinistore.h purge_kv_map algorithmic complexity — InfiniStore CWE-407 | 3.3 | Low | 2026-06-05 |
| CVE-2026-7023 | ByteDance coze-studio databaseTool database_impl.go ExecuteSQL sql injection — coze-studio CWE-89 | 6.3 | Medium | 2026-04-26 |
| CVE-2026-6878 | ByteDance verl grader.py math_equal sandbox — verl CWE-265 | 5.6 | Medium | 2026-04-23 |
| CVE-2026-40518 | ByteDance DeerFlow Path Traversal and Arbitrary File Write via Bootstrap Mode — deer-flow CWE-22 | 7.1 | High | 2026-04-17 |
This page lists every published CVE security advisory associated with bytedance. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.