Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.9A security vulnerability has been detected in Rareprob HD Video Player All Formats App 12.1.372 on Android.Open the advisoryDec 2, 2025
- High8.8Insecure Storage of Sensitive Information vulnerability in MeetMe on iOS, Android allows Retrieve Embedded Sensitive Data.Open the advisoryDec 2, 2025
- Medium4.4In GPU pdma, there is a possible information disclosure due to a missing bounds check.Open the advisoryDec 2, 2025
- Medium4.4In GPU pdma, there is a possible memory corruption due to a missing permission check.Open the advisoryDec 2, 2025
- High7.8In display, there is a possible out of bounds read due to a missing bounds check.Open the advisoryDec 2, 2025
- High7.8In mmdvfs, there is a possible out of bounds write due to a missing bounds check.Open the advisoryDec 2, 2025
- Medium5.5Android Framework Information Disclosure VulnerabilityPatch nowKEVEPSS 0.26%Dec 1, 2025
- High7.8Android Framework Privilege Escalation VulnerabilityPatch nowKEVEPSS 0.26%Dec 1, 2025
- Critical9.8Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.Open the advisoryNov 13, 2025
- High8.8Android Runtime Use-After-Free VulnerabilityPatch nowKEVEPSS 0.63%Sep 1, 2025
- Low1.9A vulnerability was detected in Kakao 헤이카카오 Hey Kakao App up to 2.17.4 on Android.Open the advisoryAug 29, 2025
- Low1.9A weakness has been identified in UAB Paytend App up to 2.1.9 on Android.Open the advisoryAug 29, 2025
- Medium6.5When a link can be opened in an external application, Firefox for Android will, by default, prompt the user before doing so.Check this weekEPSS 25.00%Jun 24, 2025
- Medium4.3When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the correct URL, potentially leading to phishing attacks.Check this weekEPSS 23.00%Jun 24, 2025
- UnknownQualcomm ar8035_firmware Improper Validation of Array IndexPatch nowKEVEPSS 0.58%Jun 17, 2025
- Medium4.8An open redirection vulnerability in M-Files mobile applications for Android and iOS prior to version 25.6.0 allows attackers to use maliciously crafted PDF files to trick other usCheck this weekEPSS 27.00%Jun 16, 2025
- High7.8Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.Check if you run itEPSS 8.00%Jun 3, 2025
- High8.2Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.Check if you run itEPSS 0.30%Jun 3, 2025
- High8.2Information disclosure may occur while processing goodbye RTCP packet from network.Check if you run itEPSS 0.24%Jun 3, 2025
- High7.8Memory corruption may occur while attaching VM when the HLOS retains access to VM.Check if you run itEPSS 8.00%Jun 3, 2025
- High8.3An application "com.pri.applock", which is pre-loaded on Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data.Check if you run itEPSS 0.20%May 30, 2025
- Medium6.9An application "com.pri.applock", which is pre-loaded on Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data.Check this weekEPSS 18.00%May 30, 2025
- Medium6.9Android based smartphones from vendors such as Ulefone and Krüger&Matz contain "com.pri.factorytest" application preloaded onto devices during manufacturing process.Check if you run itEPSS 0.19%May 30, 2025
- High7.5Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions Remote Desktop Manager allows an authenticated user to gain unauthorizCheck if you run itEPSS 0.57%May 29, 2025
- Medium6.5Inappropriate implementation in Messages in Google Chrome on Android prior to 137.0.7151.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to perfCheck this weekEPSS 42.00%May 27, 2025