Skip to content
Exploit Radar Choose my productsProducts My radar
English

Products › Endpoints, servers and mobile

Endpoints, servers and mobile

Phones, tablets and chipsets

Phones and tablets (iOS, Android), their chipsets and mobile messaging apps.

For example: iOS, Android, Samsung, Qualcomm.

Category RSS feed

Pace of additions

Number of “Phones and tablets” vulnerabilities added to CISA’s KEV catalog, per 30-day period (the last one, still in progress, ends on September 28, 2026). Source: CISA KEV catalog.
Catalog additions per 30-day period
PeriodVulnerabilities added
Sep 4, 2025 to Oct 3, 20252
Oct 4, 2025 to Nov 2, 20250
Nov 3, 2025 to Dec 2, 20253
Dec 3, 2025 to Jan 1, 20260
Jan 2, 2026 to Jan 31, 20260
Feb 1, 2026 to Mar 2, 20261
Mar 3, 2026 to Apr 1, 20264
Apr 2, 2026 to May 1, 20260
May 2, 2026 to May 31, 20260
Jun 1, 2026 to Jun 30, 20261
Jul 1, 2026 to Jul 30, 20260
Jul 31, 2026 to Aug 29, 20260
Aug 30, 2026 to Sep 28, 2026 (in progress)1

Affected brands

In alphabetical order, with their number of vulnerabilities in this category.

  • Apple 51 vulnerabilities · 4 in the last 12 months
  • Arm 8 vulnerabilities
  • Google 19 vulnerabilities · 4 in the last 12 months
  • MediaTek 1 vulnerability
  • Meta 3 vulnerabilities
  • Qualcomm 13 vulnerabilities · 1 in the last 12 months
  • Samsung 13 vulnerabilities · 2 in the last 12 months
  • SIMalliance 1 vulnerability
  • TeleMessage 3 vulnerabilities

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

See also

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this category.

  1. Rank 1Google Pixel

    CVE-2026-58704

    Recently addedHunt for compromise (CISA)

    Google Pixel Improper Authorization Vulnerability

    Added to the catalog less than 30 days ago: ranked by date added.

    Added
    Sep 16, 2026
    CISA deadline
    3 days
    CVSS severity
    8.8 (high)

  2. Rank 2Samsung Mobile Devices (Galaxy)

    CVE-2025-21042

    Samsung Mobile Devices Out-of-Bounds Write Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Nov 10, 2025
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  3. Rank 3Samsung Mobile Devices (Galaxy)

    CVE-2025-21043

    Samsung Mobile Devices Out-of-Bounds Write Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Oct 2, 2025
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  4. Rank 4Google Android

    CVE-2025-48595

    Android Framework Integer Overflow Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jun 2, 2026
    CISA deadline
    3 days
    CVSS severity
    8.4 (high)

  5. Rank 5Apple iOS / iPadOS / macOS

    CVE-2025-43510

    Apple Multiple Products Improper Locking Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Mar 20, 2026
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  6. Rank 6Apple iOS / iPadOS

    CVE-2023-41974

    CVE from 2023, added in 2026

    Apple iOS and iPadOS Use-After-Free Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Mar 5, 2026
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  7. Rank 7Qualcomm Snapdragon (chipsets and drivers)

    CVE-2026-21385

    Qualcomm Multiple Chipsets Memory Corruption Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Mar 3, 2026
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  8. Rank 8Apple iOS / iPadOS / macOS

    CVE-2026-20700

    Apple Multiple Buffer Overflow Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Feb 12, 2026
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  9. Rank 9Google Android

    CVE-2025-48572

    Android Framework Privilege Escalation Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Dec 2, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  10. Rank 10Apple iOS / iPadOS / macOS

    CVE-2025-43520

    Apple Multiple Products Classic Buffer Overflow Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Mar 20, 2026
    CISA deadline
    14 days
    CVSS severity
    5.5 (medium)
Show 102 more vulnerabilities

  1. Rank 11Google Android

    CVE-2025-48633

    Android Framework Information Disclosure Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Dec 2, 2025
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

  2. Rank 12Apple iOS / iPadOS / macOS

    CVE-2025-43300

    Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 21, 2025
    CISA deadline
    21 days
    CVSS severity
    10.0 (critical)

  3. Rank 13Apple iOS / iPadOS / macOS

    CVE-2025-24085

    Apple Multiple Products Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 29, 2025
    CISA deadline
    21 days
    CVSS severity
    10.0 (critical)

  4. Rank 14Apple iOS / iPadOS / macOS

    CVE-2025-31200

    Apple Multiple Products Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 17, 2025
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  5. Rank 15Apple iOS / iPadOS / macOS

    CVE-2025-31201

    Apple Multiple Products Arbitrary Read and Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 17, 2025
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  6. Rank 16Meta WhatsApp

    CVE-2019-3568

    CVE from 2019, added in 2022

    WhatsApp VOIP Stack Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 19, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  7. Rank 17Apple iOS / iPadOS / macOS

    CVE-2022-22587

    Apple Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 28, 2022
    CISA deadline
    14 days
    CVSS severity
    9.8 (critical)

  8. Rank 18SIMalliance Toolbox Browser

    CVE-2019-16256

    CVE from 2019, added in 2021

    SIMalliance Toolbox Browser Command Injection Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    9.8 (critical)

  9. Rank 19Apple iOS / iPadOS / macOS

    CVE-2026-86950

    Hunt for compromise (CISA)

    Apple Multiple Products Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 29, 2026
    CISA deadline
    3 days
    CVSS severity
    8.8 (high)

  10. Rank 20Google Android

    CVE-2025-48543

    Android Runtime Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 4, 2025
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  11. Rank 21Arm Mali GPU (pilote noyau)

    CVE-2021-29256

    CVE from 2021, added in 2023

    Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jul 7, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  12. Rank 22Arm Mali GPU (pilote noyau)

    CVE-2022-38181

    Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 30, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  13. Rank 23Apple iOS / iPadOS

    CVE-2020-9818

    Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    8.8 (high)

  14. Rank 24Arm Mali GPU (pilote noyau)

    CVE-2021-28663

    Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  15. Rank 25Arm Mali GPU (pilote noyau)

    CVE-2021-28664

    Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  16. Rank 26Qualcomm Snapdragon (chipsets and drivers)

    CVE-2025-21479

    Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 3, 2025
    CISA deadline
    21 days
    CVSS severity
    8.6 (high)

  17. Rank 27Qualcomm Snapdragon (chipsets and drivers)

    CVE-2025-21480

    Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 3, 2025
    CISA deadline
    21 days
    CVSS severity
    8.6 (high)

  18. Rank 28Apple iOS / iPadOS / macOS

    CVE-2023-28206

    Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 10, 2023
    CISA deadline
    21 days
    CVSS severity
    8.6 (high)

  19. Rank 29Qualcomm Snapdragon (chipsets and drivers)

    CVE-2013-2597

    CVE from 2013, added in 2022

    Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 15, 2022
    CISA deadline
    21 days
    CVSS severity
    8.4 (high)

  20. Rank 30Meta WhatsApp

    CVE-2019-18426

    CVE from 2019, added in 2022

    WhatsApp Cross-Site Scripting Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 23, 2022
    CISA deadline
    21 days
    CVSS severity
    8.2 (high)

  21. Rank 31Qualcomm Snapdragon (chipsets and drivers)

    CVE-2024-43047

    Qualcomm Multiple Chipsets Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 8, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  22. Rank 32Google Android

    CVE-2024-36971

    Android Kernel Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 7, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  23. Rank 33Google Pixel

    CVE-2024-32896

    Android Pixel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 13, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  24. Rank 34Arm Mali GPU (pilote noyau)

    CVE-2024-4610

    Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 12, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  25. Rank 35Google Pixel

    CVE-2024-29748

    Android Pixel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 4, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  26. Rank 36Apple iOS / iPadOS / macOS

    CVE-2024-23225

    Apple Multiple Products Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 6, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  27. Rank 37Apple iOS / iPadOS / macOS

    CVE-2024-23296

    Apple Multiple Products Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 6, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  28. Rank 38Apple iOS / iPadOS / macOS

    CVE-2023-41990

    Apple Multiple Products Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 8, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  29. Rank 39Qualcomm Snapdragon (chipsets and drivers)

    CVE-2022-22071

    Qualcomm Multiple Chipsets Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 5, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  30. Rank 40Qualcomm Snapdragon (chipsets and drivers)

    CVE-2023-33063

    Qualcomm Multiple Chipsets Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 5, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  31. Rank 41Qualcomm Snapdragon (chipsets and drivers)

    CVE-2023-33106

    Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 5, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  32. Rank 42Qualcomm Snapdragon (chipsets and drivers)

    CVE-2023-33107

    Qualcomm Multiple Chipsets Integer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 5, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  33. Rank 43Apple iOS / iPadOS

    CVE-2023-42824

    Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 5, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  34. Rank 44Apple iOS / iPadOS / macOS

    CVE-2023-41992

    Apple Multiple Products Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 25, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  35. Rank 45Samsung Mobile Devices (Galaxy)

    CVE-2022-22265

    Samsung Mobile Devices Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 18, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  36. Rank 46Google Android

    CVE-2023-35674

    Android Framework Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 13, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  37. Rank 47Apple iOS / iPadOS

    CVE-2023-41061

    Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 11, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  38. Rank 48Apple iOS / iPadOS / macOS

    CVE-2023-41064

    Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 11, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  39. Rank 49Samsung Mobile Devices (Galaxy)

    CVE-2021-25487

    CVE from 2021, added in 2023

    Samsung Mobile Devices Out-of-Bounds Read Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 29, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  40. Rank 50Apple iOS / iPadOS / macOS

    CVE-2023-32434

    Apple Multiple Products Integer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 23, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  41. Rank 51Google Android

    CVE-2023-20963

    Android Framework Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 13, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  42. Rank 52Apple iOS / iPadOS / macOS

    CVE-2021-30900

    CVE from 2021, added in 2023

    Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 30, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  43. Rank 53Arm Mali GPU (pilote noyau)

    CVE-2022-22706

    Arm Mali GPU Kernel Driver Unspecified Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 30, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  44. Rank 54Apple iOS / iPadOS

    CVE-2022-42827

    Apple iOS and iPadOS Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 25, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  45. Rank 55Apple iOS / iPadOS / macOS

    CVE-2022-32917

    Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 14, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  46. Rank 56Google Android

    CVE-2011-1823

    CVE from 2011, added in 2022

    Android OS Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 8, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  47. Rank 57Apple iOS / iPadOS / macOS

    CVE-2022-32894

    Apple iOS and macOS Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 18, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  48. Rank 58Apple iOS / iPadOS / macOS

    CVE-2018-4344

    CVE from 2018, added in 2022

    Apple Multiple Products Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 27, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  49. Rank 59Apple iOS / iPadOS / macOS

    CVE-2019-8605

    CVE from 2019, added in 2022

    Apple Multiple Products Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 27, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  50. Rank 60Apple iOS / iPadOS / macOS

    CVE-2020-3837

    CVE from 2020, added in 2022

    Apple Multiple Products Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 27, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  51. Rank 61Apple iOS / iPadOS

    CVE-2020-9907

    CVE from 2020, added in 2022

    Apple Multiple Products Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 27, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  52. Rank 62Apple iOS / iPadOS

    CVE-2021-30983

    Apple iOS and iPadOS Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 27, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  53. Rank 63Apple iOS / iPadOS

    CVE-2016-4656

    CVE from 2016, added in 2022

    Apple iOS Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 24, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  54. Rank 64Apple iOS / iPadOS / macOS

    CVE-2019-7286

    CVE from 2019, added in 2022

    Apple Multiple Products Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 23, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  55. Rank 65Apple iOS / iPadOS

    CVE-2019-7287

    CVE from 2019, added in 2022

    Apple iOS Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 23, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  56. Rank 66Google Android

    CVE-2021-1048

    Android Kernel Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 23, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  57. Rank 67Apple iOS / iPadOS / macOS

    CVE-2021-30883

    Apple Multiple Products Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 23, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  58. Rank 68Google Pixel

    CVE-2021-39793

    Google Pixel Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 11, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  59. Rank 69Qualcomm Snapdragon (chipsets and drivers)

    CVE-2020-11261

    Qualcomm Multiple Chipsets Improper Input Validation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 1, 2021
    CISA deadline
    182 days
    CVSS severity
    7.8 (high)

  60. Rank 70Google Android

    CVE-2019-2215

    CVE from 2019, added in 2021

    Android Kernel Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  61. Rank 71Google Android

    CVE-2020-0041

    Android Kernel Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  62. Rank 72MediaTek Chipsets

    CVE-2020-0069

    Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  63. Rank 73Apple iOS / iPadOS / macOS

    CVE-2020-27930

    Apple Multiple Products Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  64. Rank 74Apple iOS / iPadOS / macOS

    CVE-2020-27932

    Apple Multiple Products Type Confusion Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  65. Rank 75Apple iOS / iPadOS / macOS

    CVE-2020-9859

    Apple Multiple Products Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  66. Rank 76Qualcomm Snapdragon (chipsets and drivers)

    CVE-2021-1905

    Qualcomm Multiple Chipsets Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  67. Rank 77Apple iOS / iPadOS / macOS

    CVE-2021-30807

    Apple Multiple Products Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  68. Rank 78Apple iOS / iPadOS / macOS

    CVE-2021-30860

    Apple Multiple Products Integer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  69. Rank 79Apple iOS / iPadOS / macOS

    CVE-2021-30869

    Apple iOS, iPadOS, and macOS Type Confusion Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  70. Rank 80Qualcomm Snapdragon (chipsets and drivers)

    CVE-2025-27038

    Qualcomm Multiple Chipsets Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 3, 2025
    CISA deadline
    21 days
    CVSS severity
    7.5 (high)

  71. Rank 81Apple iOS / iPadOS / macOS

    CVE-2021-31010

    Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 25, 2022
    CISA deadline
    21 days
    CVSS severity
    7.5 (high)

  72. Rank 82Apple iOS / iPadOS / macOS

    CVE-2019-6223

    CVE from 2019, added in 2021

    Apple iOS and macOS Group Facetime Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.5 (high)

  73. Rank 83Google Android

    CVE-2024-43093

    Android Framework Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 7, 2024
    CISA deadline
    21 days
    CVSS severity
    7.3 (high)

  74. Rank 84Samsung Mobile Devices (Galaxy)

    CVE-2021-25337

    Samsung Mobile Devices Improper Access Control Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 8, 2022
    CISA deadline
    21 days
    CVSS severity
    7.1 (high)

  75. Rank 85Apple iOS / iPadOS / macOS

    CVE-2022-48618

    CVE from 2022, added in 2024

    Apple Multiple Products Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 31, 2024
    CISA deadline
    21 days
    CVSS severity
    7.0 (high)

  76. Rank 86Apple iOS / iPadOS / macOS

    CVE-2021-1782

    Apple Multiple Products Race Condition Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.0 (high)

  77. Rank 87Samsung Mobile Devices (Galaxy)

    CVE-2021-25371

    CVE from 2021, added in 2023

    Samsung Mobile Devices Unspecified Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 29, 2023
    CISA deadline
    21 days
    CVSS severity
    6.7 (medium)

  78. Rank 88Samsung Mobile Devices (Galaxy)

    CVE-2021-25372

    CVE from 2021, added in 2023

    Samsung Mobile Devices Improper Boundary Check Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 29, 2023
    CISA deadline
    21 days
    CVSS severity
    6.7 (medium)

  79. Rank 89Samsung Mobile Devices (Galaxy)

    CVE-2021-25394

    CVE from 2021, added in 2023

    Samsung Mobile Devices Race Condition Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 29, 2023
    CISA deadline
    21 days
    CVSS severity
    6.4 (medium)

  80. Rank 90Samsung Mobile Devices (Galaxy)

    CVE-2021-25395

    CVE from 2021, added in 2023

    Samsung Mobile Devices Race Condition Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 29, 2023
    CISA deadline
    21 days
    CVSS severity
    6.4 (medium)

  81. Rank 91Google Android

    CVE-2021-0920

    Android Kernel Race Condition Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 23, 2022
    CISA deadline
    21 days
    CVSS severity
    6.4 (medium)

  82. Rank 92Apple iOS / iPadOS

    CVE-2025-24200

    Apple iOS and iPadOS Incorrect Authorization Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 12, 2025
    CISA deadline
    21 days
    CVSS severity
    6.1 (medium)

  83. Rank 93Google Pixel

    CVE-2024-29745

    Android Pixel Information Disclosure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 4, 2024
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

  84. Rank 94Google Pixel

    CVE-2023-21237

    Android Pixel Information Disclosure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 5, 2024
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

  85. Rank 95Arm Mali GPU (pilote noyau)

    CVE-2023-4211

    Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 3, 2023
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

  86. Rank 96Apple iOS / iPadOS / macOS

    CVE-2023-41991

    Apple Multiple Products Improper Certificate Validation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 25, 2023
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

  87. Rank 97Apple iOS / iPadOS / macOS

    CVE-2023-38606

    Apple Multiple Products Kernel Unspecified Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jul 26, 2023
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

  88. Rank 98Samsung Mobile Devices (Galaxy)

    CVE-2021-25489

    CVE from 2021, added in 2023

    Samsung Mobile Devices Improper Input Validation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 29, 2023
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

  89. Rank 99Samsung Mobile Devices (Galaxy)

    CVE-2021-25369

    Samsung Mobile Devices Improper Access Control Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 8, 2022
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

  90. Rank 100Apple iOS / iPadOS / macOS

    CVE-2020-9934

    CVE from 2020, added in 2022

    Apple iOS, iPadOS, and macOS Input Validation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 8, 2022
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

  91. Rank 101Apple iOS / iPadOS

    CVE-2016-4655

    CVE from 2016, added in 2022

    Apple iOS Information Disclosure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 24, 2022
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

  92. Rank 102Apple iOS / iPadOS / macOS

    CVE-2020-27950

    Apple Multiple Products Memory Initialization Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    5.5 (medium)

  93. Rank 103Qualcomm Snapdragon (chipsets and drivers)

    CVE-2021-1906

    Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    5.5 (medium)

  94. Rank 104Meta WhatsApp

    CVE-2025-55177

    Meta Platforms WhatsApp Incorrect Authorization Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 2, 2025
    CISA deadline
    21 days
    CVSS severity
    5.4 (medium)

  95. Rank 105TeleMessage TM SGNL

    CVE-2025-48927

    TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jul 1, 2025
    CISA deadline
    21 days
    CVSS severity
    5.3 (medium)

  96. Rank 106TeleMessage TM SGNL

    CVE-2025-47729

    TeleMessage TM SGNL Hidden Functionality Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 12, 2025
    CISA deadline
    21 days
    CVSS severity
    4.9 (medium)

  97. Rank 107Samsung Mobile Devices (Galaxy)

    CVE-2023-21492

    Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 19, 2023
    CISA deadline
    21 days
    CVSS severity
    4.4 (medium)

  98. Rank 108Samsung Mobile Devices (Galaxy)

    CVE-2021-25370

    Samsung Mobile Devices Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 8, 2022
    CISA deadline
    21 days
    CVSS severity
    4.4 (medium)

  99. Rank 109Apple iOS / iPadOS

    CVE-2020-9819

    Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    4.3 (medium)

  100. Rank 110Apple iOS / iPadOS / macOS

    CVE-2025-43200

    Apple Multiple Products Unspecified Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 16, 2025
    CISA deadline
    21 days
    CVSS severity
    4.2 (medium)

  101. Rank 111TeleMessage TM SGNL

    CVE-2025-48928

    TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jul 1, 2025
    CISA deadline
    21 days
    CVSS severity
    4.0 (medium)

  102. Rank 112Arm Mali GPU (pilote noyau)

    CVE-2023-26083

    Arm Mali GPU Kernel Driver Information Disclosure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 7, 2023
    CISA deadline
    21 days
    CVSS severity
    3.3 (low)

Filed under another category

These 37 vulnerabilities also concern this type of product, but are counted in their main category. My radar finds them when you follow this category.

  1. Apple Safari / WebKit

    CVE-2025-31277

    Apple Multiple Products Buffer Overflow Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Mar 20, 2026
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  2. Apple Safari / WebKit

    CVE-2023-43000

    CVE from 2023, added in 2026

    Apple Multiple products Use-After-Free Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Mar 5, 2026
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  3. Apple Safari / WebKit

    CVE-2025-43529

    Apple Multiple Products Use-After-Free WebKit Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Dec 15, 2025
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  4. Apple Safari / WebKit

    CVE-2022-48503

    CVE from 2022, added in 2025

    Apple Multiple Products Unspecified Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Oct 20, 2025
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  5. Apple Safari / WebKit

    CVE-2021-30952

    CVE from 2021, added in 2026

    Apple Multiple Products Integer Overflow or Wraparound Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Mar 5, 2026
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)
Show 32 more vulnerabilities

  1. Apple Safari / WebKit

    CVE-2025-24201

    Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 13, 2025
    CISA deadline
    21 days
    CVSS severity
    10.0 (critical)

  2. Apple Safari / WebKit

    CVE-2021-1870

    Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    9.8 (critical)

  3. Apple Safari / WebKit

    CVE-2021-1871

    Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    9.8 (critical)

  4. Google Chrome / Chromium

    CVE-2020-16010

    Google Chrome for Android UI Heap Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    9.6 (critical)

  5. Apple Safari / WebKit

    CVE-2024-44308

    Apple Multiple Products Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 21, 2024
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  6. Apple Safari / WebKit

    CVE-2024-23222

    Apple Multiple Products WebKit Type Confusion Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 23, 2024
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  7. Apple Safari / WebKit

    CVE-2023-42917

    Apple Multiple Products WebKit Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 4, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  8. Apple Safari / WebKit

    CVE-2023-41993

    Apple Multiple Products WebKit Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 25, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  9. Apple Safari / WebKit

    CVE-2023-37450

    Apple Multiple Products WebKit Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jul 13, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  10. Apple Safari / WebKit

    CVE-2023-32435

    Apple Multiple Products WebKit Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 23, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  11. Apple Safari / WebKit

    CVE-2023-32439

    Apple Multiple Products WebKit Type Confusion Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 23, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  12. Apple Safari / WebKit

    CVE-2023-32373

    Apple Multiple Products WebKit Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 22, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  13. Apple Safari / WebKit

    CVE-2023-28205

    Apple Multiple Products WebKit Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 10, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  14. Apple Safari / WebKit

    CVE-2023-23529

    Apple Multiple Products WebKit Type Confusion Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 14, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  15. Apple Safari / WebKit

    CVE-2022-42856

    Apple iOS Type Confusion Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 14, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  16. Apple Safari / WebKit

    CVE-2022-32893

    Apple iOS and macOS Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 18, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  17. Apple Safari / WebKit

    CVE-2016-4657

    CVE from 2016, added in 2022

    Apple iOS Webkit Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 24, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  18. Apple Safari / WebKit

    CVE-2019-8506

    CVE from 2019, added in 2022

    Apple Multiple Products Type Confusion Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 4, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  19. Apple Safari / WebKit

    CVE-2021-1789

    Apple Multiple Products Type Confusion Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 4, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  20. Apple Safari / WebKit

    CVE-2022-22620

    Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 11, 2022
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  21. Apple Safari / WebKit

    CVE-2021-30661

    Apple Multiple Products WebKit Storage Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  22. Apple Safari / WebKit

    CVE-2021-30663

    Apple Multiple Products WebKit Integer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  23. Apple Safari / WebKit

    CVE-2021-30665

    Apple Multiple Products WebKit Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  24. Apple Safari / WebKit

    CVE-2021-30666

    Apple iOS WebKit Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  25. Apple Safari / WebKit

    CVE-2021-30761

    Apple iOS WebKit Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  26. Apple Safari / WebKit

    CVE-2021-30762

    Apple iOS WebKit Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  27. Apple Safari / WebKit

    CVE-2021-30858

    Apple iOS, iPadOS, macOS Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  28. Apple Safari / WebKit

    CVE-2023-32409

    Apple Multiple Products WebKit Sandbox Escape Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 22, 2023
    CISA deadline
    21 days
    CVSS severity
    8.6 (high)

  29. Apple Safari / WebKit

    CVE-2023-42916

    Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 4, 2023
    CISA deadline
    21 days
    CVSS severity
    6.5 (medium)

  30. Apple Safari / WebKit

    CVE-2023-28204

    Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 22, 2023
    CISA deadline
    21 days
    CVSS severity
    6.5 (medium)

  31. Apple Safari / WebKit

    CVE-2024-44309

    Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 21, 2024
    CISA deadline
    21 days
    CVSS severity
    6.3 (medium)

  32. Apple Safari / WebKit

    CVE-2021-1879

    Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    6.1 (medium)

Follow and verify

Get new vulnerabilities in this category: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.