CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 10:20 UTC )
This week: 5,469 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,469 Show in the list Critical, last 7 days 357 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product qualcomm:snapdragon_460_mobile_platform_firmware . Show all products
76 CVEs, showing 51 to 76 Previous Page 2 of 2 CVE Severity Title Published CVE-2026-25259 High 7.8 Memory corruption while processing multiple IOCTL command for escape operations. Jun 1, 2026 CVE-2026-25276 High 8.8 Memory corruption while using Strongbox due to missing bounds check. Jun 1, 2026 CVE-2026-25277 High 8.8 Memory corruption while using Strongbox due to buffer overflow. Jun 1, 2026 CVE-2025-59615 High 7.8 Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization. Jul 6, 2026 CVE-2025-59616 High 7.8 Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory. Jul 6, 2026 CVE-2025-59617 High 7.3 Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input. Jul 6, 2026 CVE-2026-21368 Medium 5.3 Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks. Jul 6, 2026 CVE-2026-21369 Medium 5.3 Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification. Jul 6, 2026 CVE-2026-21370 Medium 5.3 Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values. Jul 6, 2026 CVE-2026-21384 Medium 5.3 Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits. Jul 6, 2026 CVE-2026-25268 High 8.8 Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations. Jul 6, 2026 CVE-2026-24077 Medium 6.5 Integer Underflow (Wrap or Wraparound) in WLAN Host Assigned by qualcomm
Aug 4, 2026 CVE-2026-24078 Medium 6.5 Exposure of Private Personal Information to an Unauthorized Actor in Data Modem Assigned by qualcomm
Aug 4, 2026 CVE-2026-24079 High 8.1 Missing Authentication for Critical Function in Data Modem Assigned by qualcomm
Aug 4, 2026 CVE-2026-25292 High 7.6 Improper Validation of Syntactic Correctness of Input in Automotive Linux OS Assigned by qualcomm
Aug 4, 2026 CVE-2026-25275 High 7.5 Buffer Over-read in WLAN Firmware Assigned by qualcomm
Sep 17, 2026 CVE-2026-25263 Medium 6.6 Out of Bounds write in Linux Camera Assigned by qualcomm
Oct 6, 2026 CVE-2026-25267 High 7.8 Missing Authorization in Core Assigned by qualcomm
Oct 6, 2026 CVE-2026-25269 Medium 6.7 Out-of-bounds Write in Camera Driver Assigned by qualcomm
Oct 6, 2026 CVE-2026-25270 Medium 6.7 Out-of-bounds Write in Camera Driver Assigned by qualcomm
Oct 6, 2026 CVE-2026-25273 Medium 6.7 Out-of-bounds Write in Camera Driver Assigned by qualcomm
Oct 6, 2026 CVE-2026-25291 High 7.8 Use After Free in Graphics Assigned by qualcomm
Oct 6, 2026 CVE-2026-25302 High 7.1 Improper Verification of Cryptographic Signature in Boot Assigned by qualcomm
Oct 6, 2026 CVE-2026-57537 High 7.8 Use After Free in DSP Service Assigned by qualcomm
Oct 6, 2026 CVE-2026-57545 High 7.8 Untrusted Pointer Dereference in Graphics Assigned by qualcomm
Oct 6, 2026 CVE-2026-57554 High 7.8 Use After Free in DSP Service Assigned by qualcomm
Oct 6, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
