Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-21371 | 7.8 high | 0.00% | qualcomm, snapdragon_8cx_compute_platform_\"poipu_pro\"_firmware, snapdragon_8cx_gen_2_5g_compute_platform_firmware, snapdragon_8cx_gen_2_5g_compute_platform_\"poipu_pro\"_firmware | Memory Corruption when retrieving output buffer with insufficient size validation. | Mon 26 Oct |
| CVE-2026-21373 | 7.8 high | 0.00% | qualcomm, aqt1000_firmware, cologne_firmware, fastconnect_6200_firmware | Memory Corruption when accessing an output buffer without validating its size during IOCTL processing. | Mon 26 Oct |
| CVE-2026-21374 | 7.8 high | 0.00% | qualcomm, sm6250_firmware, snapdragon_460_mobile_platform_firmware, snapdragon_662_mobile_platform_firmware | Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation. | Mon 26 Oct |
| CVE-2026-21376 | 7.8 high | 0.00% | qualcomm, aqt1000_firmware, cologne_firmware, fastconnect_6200_firmware | Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver. | Mon 26 Oct |
| CVE-2026-21378 | 7.8 high | 0.00% | qualcomm, wcd9375_firmware, wcd9378c_firmware, wcd9380_firmware | Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver. | Mon 26 Oct |
| CVE-2026-21379 | 7.8 high | 0.00% | qualcomm, aqt1000_firmware, cologne_firmware, fastconnect_6200_firmware | Memory Corruption when allocating memory with sizes that exceed the maximum allowed value. | Sun 25 Oct |
| CVE-2026-25267 | 7.8 high | 0.00% | qualcomm, qca6698au_firmware, qca6797aq_firmware, qcc710_firmware | Memory corruption when non-secure loader rewrites page tables before secure memory initialization. | 9 Oct |
| CVE-2025-27053 | 7.8 high | 0.00% | qualcomm, 315_5g_iot_modem_firmware, 9205_lte_modem_firmware, mdm9650_firmware | Memory corruption during PlayReady APP usecase while processing TA commands. | 8 Oct |
| CVE-2025-27054 | 7.8 high | 0.00% | qualcomm, 315_5g_iot_modem_firmware, 9205_lte_modem_firmware, aqt1000_firmware | Memory corruption while processing a malformed license file during reboot. | 8 Oct |
| CVE-2026-24084 | 7.5 high | 0.00% | qualcomm, sdx57m_firmware, sdx61_firmware, sdx71m_firmware | Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities. | Fri 23 Oct |
| CVE-2026-24076 | 6.7 medium | 0.00% | qualcomm, aqt1000_firmware, cologne_firmware, fastconnect_6200_firmware | Memory Corruption when processing registry values with incorrect types using a direct query method. | Fri 23 Oct |
| CVE-2026-25274 | 6.7 medium | 0.00% | qualcomm, aqt1000_firmware, cologne_firmware, congo_firmware | Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization. | 9 Oct |
| CVE-2026-25263 | 6.6 medium | 0.00% | qualcomm, snapdragon_g1_gen_2_gaming_platform_firmware, 5g_fixed_wireless_access_platform_firmware, 9205_lte_modem_firmware | Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters. | 9 Oct |
| CVE-2026-24077 | 6.5 medium | 0.00% | qualcomm, aqt1000_firmware, ar8035_firmware, csra6620_firmware | Information Disclosure when processing wireless network channel switch information with improperly formatted length fields. | Fri 23 Oct |
14 of 14
Download these 14 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.