Sysprobs Sysprobs

CISA KEV by vendor

Qualcomm vulnerabilities in the CISA KEV catalogue

12 Qualcomm entries in CISA's Known Exploited Vulnerabilities catalogue, 0 of them (0 percent) known to have been used in ransomware campaigns. First added 3 November 2021, latest 3 March 2026.

Last updated MethodologyDownload all entries (CSV)

By . Published by Sysprobs.

Dinesh has worked in IT for about 20 years across virtualisation, networking and Microsoft platforms. He runs Sysprobs.

Data status: a source is stale

Last synced CISA catalogue version 2026.11.04 (released 4 November 2026) 1,768 entries Updated manually

12entries, 0.7% of the catalogue
0known ransomware use
0added in the last 7 days
0federal due dates in the next 14 days

Products

Qualcomm products in the catalogue, by number of entries
Product, as CISA names itEntries
Multiple Chipsets11
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables1

Latest additions

The 10 most recent Qualcomm entries
CVEProductAddedDueRansomwareCVSSEPSSSSVCExposed asset window
CVE-2026-21385Multiple Chipsets2026-03-032026-03-24Unknown7.8 High1.3%Not auto, total3 days + triage
CVE-2025-27038Multiple Chipsets2025-06-032025-06-24Unknown7.5 High1.0%Not auto, total3 days + triage
CVE-2025-21480Multiple Chipsets2025-06-032025-06-24Unknown8.6 High0.4%Not auto, total3 days + triage
CVE-2025-21479Multiple Chipsets2025-06-032025-06-24Unknown8.6 High0.7%Not auto, total3 days + triage
CVE-2024-43047Multiple Chipsets2024-10-082024-10-29Unknown7.8 High0.6%Not auto, total3 days + triage
CVE-2023-33107Multiple Chipsets2023-12-052023-12-26Unknown7.8 High0.7%Not auto, total3 days + triage
CVE-2023-33106Multiple Chipsets2023-12-052023-12-26Unknown7.8 High0.7%Not auto, total3 days + triage
CVE-2023-33063Multiple Chipsets2023-12-052023-12-26Unknown7.8 High0.6%Not auto, total3 days + triage
CVE-2022-22071Multiple Chipsets2023-12-052023-12-26Unknown7.8 High0.3%Not auto, total3 days + triage
CVE-2020-11261Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables2021-12-012022-06-01Unknown7.8 High1.5%Not auto, total3 days + triage

All 12 entries

Every Qualcomm entry, newest first
CVEProductAddedDueRansomwareCVSSEPSSSSVCExposed asset window
CVE-2026-21385Multiple Chipsets2026-03-032026-03-24Unknown7.8 High1.3%Not auto, total3 days + triage
CVE-2025-27038Multiple Chipsets2025-06-032025-06-24Unknown7.5 High1.0%Not auto, total3 days + triage
CVE-2025-21480Multiple Chipsets2025-06-032025-06-24Unknown8.6 High0.4%Not auto, total3 days + triage
CVE-2025-21479Multiple Chipsets2025-06-032025-06-24Unknown8.6 High0.7%Not auto, total3 days + triage
CVE-2024-43047Multiple Chipsets2024-10-082024-10-29Unknown7.8 High0.6%Not auto, total3 days + triage
CVE-2023-33107Multiple Chipsets2023-12-052023-12-26Unknown7.8 High0.7%Not auto, total3 days + triage
CVE-2023-33106Multiple Chipsets2023-12-052023-12-26Unknown7.8 High0.7%Not auto, total3 days + triage
CVE-2023-33063Multiple Chipsets2023-12-052023-12-26Unknown7.8 High0.6%Not auto, total3 days + triage
CVE-2022-22071Multiple Chipsets2023-12-052023-12-26Unknown7.8 High0.3%Not auto, total3 days + triage
CVE-2020-11261Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables2021-12-012022-06-01Unknown7.8 High1.5%Not auto, total3 days + triage
CVE-2021-1906Multiple Chipsets2021-11-032021-11-17Unknown5.5 Medium0.5%Not auto, partial14 days
CVE-2021-1905Multiple Chipsets2021-11-032022-05-03Unknown7.8 High1.5%Not auto, total3 days + triage

Due dates bind US federal civilian executive branch agencies only (BOD 26-04). Filter Qualcomm in the tracker by date, score or status.

Source: CISA Known Exploited Vulnerabilities Catalog; NVD, FIRST EPSS and CISA SSVC for the scores. This product uses data from the NVD API but is not endorsed or certified by the NVD. CISA does not endorse Sysprobs.