Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-25267 | 7.8 high | 0.00% | qualcomm, qca6698au_firmware, qca6797aq_firmware, qcc710_firmware | Memory corruption when non-secure loader rewrites page tables before secure memory initialization. | 9 Oct |
| CVE-2025-27053 | 7.8 high | 0.00% | qualcomm, 315_5g_iot_modem_firmware, 9205_lte_modem_firmware, mdm9650_firmware | Memory corruption during PlayReady APP usecase while processing TA commands. | 8 Oct |
| CVE-2025-27054 | 7.8 high | 0.00% | qualcomm, 315_5g_iot_modem_firmware, 9205_lte_modem_firmware, aqt1000_firmware | Memory corruption while processing a malformed license file during reboot. | 8 Oct |
| CVE-2025-47347 | 7.8 high | 0.00% | qualcomm, qam8255p_firmware, qam8295p_firmware, qam8620p_firmware | Memory corruption while processing control commands in the virtual memory management interface. | 8 Oct |
| CVE-2026-25263 | 6.6 medium | 0.00% | qualcomm, snapdragon_g1_gen_2_gaming_platform_firmware, 5g_fixed_wireless_access_platform_firmware, 9205_lte_modem_firmware | Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters. | 9 Oct |
| CVE-2026-24077 | 6.5 medium | 0.00% | qualcomm, aqt1000_firmware, ar8035_firmware, csra6620_firmware | Information Disclosure when processing wireless network channel switch information with improperly formatted length fields. | Fri 23 Oct |
| CVE-2025-47370 | 6.5 medium | 0.00% | qualcomm, ar8035_firmware, csrb31024_firmware, fastconnect_6700_firmware | Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan. | 18 Oct |
7 of 7
Download these 7 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.