Entries matching “Qualcomm”

Download CSV

12 entries match.

Added	CVE	Vendor	Product	Patch deadline	Ransomware use
Mar 3	CVE-2026-21385	Qualcomm	Multiple Chipsets	Mar 24	Unknown
Jun 3, 2025	CVE-2025-27038	Qualcomm	Multiple Chipsets	Jun 24, 2025	Unknown
Jun 3, 2025	CVE-2025-21480	Qualcomm	Multiple Chipsets	Jun 24, 2025	Unknown
Jun 3, 2025	CVE-2025-21479	Qualcomm	Multiple Chipsets	Jun 24, 2025	Unknown
Oct 8, 2024	CVE-2024-43047	Qualcomm	Multiple Chipsets	Oct 29, 2024	Unknown
Dec 5, 2023	CVE-2023-33107	Qualcomm	Multiple Chipsets	Dec 26, 2023	Unknown
Dec 5, 2023	CVE-2023-33106	Qualcomm	Multiple Chipsets	Dec 26, 2023	Unknown
Dec 5, 2023	CVE-2023-33063	Qualcomm	Multiple Chipsets	Dec 26, 2023	Unknown
Dec 5, 2023	CVE-2022-22071	Qualcomm	Multiple Chipsets	Dec 26, 2023	Unknown
Dec 1, 2021	CVE-2020-11261	Qualcomm	Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables	Jun 1, 2022	Unknown
Nov 3, 2021	CVE-2021-1906	Qualcomm	Multiple Chipsets	Nov 17, 2021	Unknown
Nov 3, 2021	CVE-2021-1905	Qualcomm	Multiple Chipsets	May 3, 2022	Unknown

How this tracker works

We read CISA’s Known Exploited Vulnerabilities catalog several times a day and count entries by the date CISA added them. The catalog lists flaws with reliable evidence of active exploitation. The patch deadline is the date CISA sets for U.S. federal civilian agencies; CISA urges every organization to treat listed flaws as a priority.

“Known” ransomware use means CISA has confirmed a ransomware campaign used the flaw. “Unknown” means not confirmed, not ruled out. Catalog published October 30, 2026. CISA’s catalog