blackberry

Latest CVEs · RSS

• CVE-2026-18247 2026-08-11 · CVSS 5.3
  A Cross Site Scripting (XSS) vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute a
• CVE-2026-40272 2026-07-29 · CVSS 7.0
  Improper Input Validation in the decode() function of the traceparser library could allow an attacker with a corrupted kernel trace event log (.kev) file, to ex
• CVE-2026-18084 2026-07-28 · CVSS 8.6
  Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting (XS
• CVE-2026-18085 2026-07-28 · CVSS 5.9
  An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Den
• CVE-2026-4018 2026-07-14 · CVSS 6.4
  TOCTOU Race Condition in specific trace commands of the TraceEvent() system call could allow an attacker with local access and with the PROCMGR_AID_TRACE abilit
• CVE-2026-4017 2026-07-14 · CVSS 7.4
  Buffer Overflow in the entry handler of the TraceEvent() system call could allow an attacker with local access to cause information disclosure, data tampering o
• CVE-2026-0515 2026-07-14 · CVSS 6.2
  Insufficient Parameter Validation in the SchedGet() system call could allow an attacker with local access to cause a crash of the QNX Neutrino kernel.
• CVE-2025-8090 2026-01-13 · CVSS 6.2
  Null pointer dereference in the MsgRegisterEvent() system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino
• CVE-2025-12766 2025-11-19 · CVSS 5.0
  An Insecure Direct Object Reference (IDOR) vulnerability in the Management Console of BlackBerry® AtHoc® (OnPrem) version 7.21 could allow an attacker to potent
• CVE-2025-2474 2025-06-10 · CVSS 9.8
  Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition o
• CVE-2024-48858 2025-01-14 · CVSS 7.5
  Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condi
• CVE-2024-48857 2025-01-14 · CVSS 7.5
  NULL pointer dereference in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condit
• CVE-2024-48856 2025-01-14 · CVSS 9.8
  Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition o
• CVE-2024-48855 2025-01-14 · CVSS 5.3
  Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in th
• CVE-2024-48854 2025-01-14 · CVSS 5.3
  Off-by-one error in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the
• CVE-2024-51723 2024-11-25 · CVSS 4.6
  A Stored Cross-Site Scripting (XSS) vulnerability in the Management Console of BlackBerry AtHoc version 7.15 could allow an attacker to potentially execute acti
• CVE-2024-51722 2024-11-12 · CVSS 6.4
  A local privilege escalation vulnerability in the SecuSUITE Server (System Configuration) of SecuSUITE versions 5.0.420 and earlier could allow a successful att
• CVE-2024-51721 2024-11-12 · CVSS 7.3
  A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentiall
• CVE-2024-51720 2024-11-12 · CVSS 4.8
  An insufficient entropy vulnerability in the SecuSUITE Secure Client Authentication (SCA) Server of SecuSUITE versions 5.0.420 and earlier could allow an attack
• CVE-2024-35215 2024-10-08 · CVSS 6.2
  NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 and 7.0 could allow a
• CVE-2024-35214 2024-08-20 · CVSS 7.1
  A tampering vulnerability in the CylanceOPTICS Windows Installer Package of CylanceOPTICS for Windows version 3.2 and 3.3 could allow an attacker to potentially
• CVE-2024-35213 2024-06-11 · CVSS 9.0
  An improper input validation vulnerability in the SGI Image Codec of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause a denial-
• CVE-2023-32701 2023-11-14 · CVSS 7.1
  Improper Input Validation in the Networking Stack of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause Information Disclosure or
• CVE-2023-21520 2023-09-12
  A PII Enumeration via Credential Recovery in the Self Service (Credential Recovery) of BlackBerry AtHoc version 7.15 could allow an attac
• CVE-2023-21523 2023-09-12
  A Stored Cross-site Scripting (XSS) vulnerability in the Management Console (User Management and Alerts) of BlackBerry AtHoc version 7.15