CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 11:50 UTC )
This week: 5,501 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,501 Show in the list Critical, last 7 days 358 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product qualcomm:fastconnect_6700_firmware . Show all products
129 CVEs, showing 101 to 129 Previous Page 3 of 3 CVE Severity Title Published CVE-2026-21384 Medium 5.3 Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits. Jul 6, 2026 CVE-2026-25268 High 8.8 Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations. Jul 6, 2026 CVE-2026-24076 Medium 6.7 Buffer Copy Without Checking Size of Input in Bluetooth HOST Assigned by qualcomm
Aug 4, 2026 CVE-2026-24077 Medium 6.5 Integer Underflow (Wrap or Wraparound) in WLAN Host Assigned by qualcomm
Aug 4, 2026 CVE-2026-24078 Medium 6.5 Exposure of Private Personal Information to an Unauthorized Actor in Data Modem Assigned by qualcomm
Aug 4, 2026 CVE-2026-24079 High 8.1 Missing Authentication for Critical Function in Data Modem Assigned by qualcomm
Aug 4, 2026 CVE-2026-24080 High 7.8 Buffer Copy Without Checking Size of Input in Biometrics Assigned by qualcomm
Aug 4, 2026 CVE-2026-24084 High 7.5 Insecure Security Identifier Mechanism in Multi-Mode Call Processor Assigned by qualcomm
Aug 4, 2026 CVE-2026-25289 Critical 9.6 Stack-based Buffer Overflow in WLAN Firmware Assigned by qualcomm
Aug 4, 2026 CVE-2026-25292 High 7.6 Improper Validation of Syntactic Correctness of Input in Automotive Linux OS Assigned by qualcomm
Aug 4, 2026 CVE-2026-24074 High 7.8 Out-of-bounds Write in Video Assigned by qualcomm
Sep 17, 2026 CVE-2026-24075 High 7.8 Buffer Over-read in Qualcomm IPC Assigned by qualcomm
Sep 17, 2026 CVE-2026-24081 High 7.4 Buffer Over-read in BT Controller Assigned by qualcomm
Sep 17, 2026 CVE-2026-25261 Medium 6.7 Untrusted Pointer Dereference in Camera Assigned by qualcomm
Sep 17, 2026 CVE-2026-25275 High 7.5 Buffer Over-read in WLAN Firmware Assigned by qualcomm
Sep 17, 2026 CVE-2026-25280 High 7.8 Out-of-bounds Write in DSP Service Assigned by qualcomm
Sep 17, 2026 CVE-2026-25294 High 7.4 Buffer Over-read in WLAN Firmware Assigned by qualcomm
Sep 17, 2026 CVE-2026-25263 Medium 6.6 Out of Bounds write in Linux Camera Assigned by qualcomm
Oct 6, 2026 CVE-2026-25267 High 7.8 Missing Authorization in Core Assigned by qualcomm
Oct 6, 2026 CVE-2026-25269 Medium 6.7 Out-of-bounds Write in Camera Driver Assigned by qualcomm
Oct 6, 2026 CVE-2026-25270 Medium 6.7 Out-of-bounds Write in Camera Driver Assigned by qualcomm
Oct 6, 2026 CVE-2026-25272 Medium 6.7 Out-of-bounds Write in Camera Driver Assigned by qualcomm
Oct 6, 2026 CVE-2026-25274 Medium 6.7 Use After Free in Windows WLAN Host Assigned by qualcomm
Oct 6, 2026 CVE-2026-25291 High 7.8 Use After Free in Graphics Assigned by qualcomm
Oct 6, 2026 CVE-2026-25302 High 7.1 Improper Verification of Cryptographic Signature in Boot Assigned by qualcomm
Oct 6, 2026 CVE-2026-57545 High 7.8 Untrusted Pointer Dereference in Graphics Assigned by qualcomm
Oct 6, 2026 CVE-2026-57554 High 7.8 Use After Free in DSP Service Assigned by qualcomm
Oct 6, 2026 CVE-2026-57555 High 7.8 Use After Free in DSP Service Assigned by qualcomm
Oct 6, 2026 CVE-2026-57559 High 7.8 Use After Free in DSP_Services Assigned by qualcomm
Oct 6, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
