https://patchfirst.co/vendor/qualcomm/New and newly exploited Qualcomm CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-21385/CVE-2026-21385#kevTue, 03 Mar 2026 00:00:00 GMTQualcomm · Multiple Chipsets. In CISA KEV since 2026-03-03. ENISA EUVD lists it as exploited. EPSS 1.3% (higher than 70.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1068 Exploitation for Privilege Escalation. Priority 67.6 of 100.kevpublic-exploitT1204.002T1068https://patchfirst.co/cve/CVE-2025-21479/CVE-2025-21479#kevTue, 03 Jun 2025 00:00:00 GMTQualcomm · Multiple Chipsets. In CISA KEV since 2025-06-03. ENISA EUVD lists it as exploited. EPSS 0.8% (higher than 56% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1068 Exploitation for Privilege Escalation. Priority 60.2 of 100.kevpublic-exploitT1204.002T1068https://patchfirst.co/cve/CVE-2025-27038/CVE-2025-27038#kevTue, 03 Jun 2025 00:00:00 GMTQualcomm · Multiple Chipsets. In CISA KEV since 2025-06-03. ENISA EUVD lists it as exploited. EPSS 1.0% (higher than 64.1% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1203 Exploitation for Client Execution; T1059 Command and Scripting Interpreter. Priority 56.1 of 100.kevT1203T1059https://patchfirst.co/cve/CVE-2025-21480/CVE-2025-21480#kevTue, 03 Jun 2025 00:00:00 GMTQualcomm · Multiple Chipsets. In CISA KEV since 2025-06-03. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 37.1% of CVEs). CVSS 8.6 HIGH. ATT&CK: T1055 Process Injection; T1495 Firmware Corruption. Priority 51.4 of 100.kevT1055T1495https://patchfirst.co/cve/CVE-2024-45569/CVE-2024-45569Mon, 03 Feb 2025 00:00:00 GMTQualcomm, Inc. · Snapdragon. Not in CISA KEV. EPSS 0.6% (higher than 47.5% of CVEs). CVSS 9.8 CRITICAL. Priority 51.4 of 100.https://patchfirst.co/cve/CVE-2024-43047/CVE-2024-43047#kevTue, 08 Oct 2024 00:00:00 GMTQualcomm · Multiple Chipsets . In CISA KEV since 2024-10-08. ENISA EUVD lists it as exploited. EPSS 0.7% (higher than 52.1% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 53.9 of 100.kevT1068https://patchfirst.co/cve/CVE-2023-33107/CVE-2023-33107#kevTue, 05 Dec 2023 00:00:00 GMTQualcomm · Multiple Chipsets. In CISA KEV since 2023-12-05. ENISA EUVD lists it as exploited. EPSS 0.7% (higher than 54.5% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 59.4 of 100.kevpublic-exploitT1068https://patchfirst.co/cve/CVE-2023-33106/CVE-2023-33106#kevTue, 05 Dec 2023 00:00:00 GMTQualcomm · Multiple Chipsets. In CISA KEV since 2023-12-05. ENISA EUVD lists it as exploited. EPSS 0.8% (higher than 56.2% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 54.7 of 100.kevT1068T1059https://patchfirst.co/cve/CVE-2023-33063/CVE-2023-33063#kevTue, 05 Dec 2023 00:00:00 GMTQualcomm · Multiple Chipsets. In CISA KEV since 2023-12-05. ENISA EUVD lists it as exploited. EPSS 0.7% (higher than 52.1% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1203 Exploitation for Client Execution. Priority 53.9 of 100.kevT1068T1203https://patchfirst.co/cve/CVE-2022-22071/CVE-2022-22071#kevTue, 05 Dec 2023 00:00:00 GMTQualcomm · Multiple Chipsets. In CISA KEV since 2023-12-05. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 35.3% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 50.5 of 100.kevT1068https://patchfirst.co/cve/CVE-2020-11261/CVE-2020-11261#kevWed, 01 Dec 2021 00:00:00 GMTQualcomm · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables. In CISA KEV since 2021-12-01. ENISA EUVD lists it as exploited. EPSS 1.6% (higher than 75.8% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 58.6 of 100.kevT1068https://patchfirst.co/cve/CVE-2021-1905/CVE-2021-1905#kevWed, 03 Nov 2021 00:00:00 GMTQualcomm · Multiple Chipsets. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 1.5% (higher than 74.9% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1203 Exploitation for Client Execution; T1068 Exploitation for Privilege Escalation. Priority 58.4 of 100.kevT1203T1068https://patchfirst.co/cve/CVE-2021-1906/CVE-2021-1906#kevWed, 03 Nov 2021 00:00:00 GMTQualcomm · Multiple Chipsets. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 0.5% (higher than 44.1% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1499 Endpoint Denial of Service. Priority 50.7 of 100.kevT1068T1499