Latest Vulnerabilities with Public Exploits

Updated 1h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

363,080 CVEs tracked 54,718 with exploits 5,087 exploited in wild 1,635 CISA KEV 4,222 Nuclei templates 55,810 vendors 48,282 researchers

54,718 results Clear all

CVE-2017-0764 7.8 HIGH 1 PoC Analysis EPSS 0.01

Android 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0 - Remote Code Execution in libvorbis

A remote code execution vulnerability in the Android media framework (libvorbis). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872015.

Sep 08, 2017 STIX 2.1

CVE-2017-0761 7.8 HIGH 1 PoC Analysis EPSS 0.01

Android 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0 - Remote Code Execution in libavc

A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38448381.

CWE-119 Sep 08, 2017 STIX 2.1

CVE-2017-0760 7.8 HIGH 1 PoC Analysis EPSS 0.01

Android 6.0 6.0.1 7.0 7.1.1 7.1.2 - Remote Code Execution in Media Framework

A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37237396.

CWE-755 Sep 08, 2017 STIX 2.1

CVE-2017-0758 7.8 HIGH 1 PoC Analysis EPSS 0.01

Android 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 - Remote Code Execution in libhevc

A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36492741.

CWE-119 Sep 08, 2017 STIX 2.1

CVE-2017-8270 7.0 HIGH 1 PoC Analysis EPSS 0.00

Qualcomm Android Driver - Use-After-Free via Race Condition

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver potentially leading to a use-after-free condition.

CWE-362 Aug 18, 2017 STIX 2.1

CVE-2017-8266 7.0 HIGH 1 PoC Analysis EPSS 0.00

Qualcomm Android Video Driver - Use-After-Free via Race Condition

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a use-after-free condition.

CWE-362 Aug 18, 2017 STIX 2.1

CVE-2017-8243 7.8 HIGH 1 PoC Analysis EPSS 0.00

Qualcomm MSM and QRD Android - Buffer Overflow in Firmware Image Processing

A buffer overflow can occur in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android when processing a firmware image file.

CWE-119 Aug 16, 2017 STIX 2.1

CVE-2017-0745 7.8 HIGH 1 PoC Analysis EPSS 0.01

Android 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 - Remote Code Execution in AVC Decoder

A remote code execution vulnerability in the Android media framework (avc decoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37079296.

CWE-665 Aug 09, 2017 STIX 2.1

CVE-2017-0725 5.5 MEDIUM 1 PoC Analysis EPSS 0.00

Android 7.0-7.1.2 - Denial of Service in libskia

A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-37627194.

CWE-125 Aug 09, 2017 STIX 2.1

CVE-2017-0722 7.8 HIGH 1 PoC Analysis EPSS 0.01

Android 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 - Remote Code Execution in Media Framework H263 Decoder

A remote code execution vulnerability in the Android media framework (h263 decoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37660827.

Aug 09, 2017 STIX 2.1

CVE-2017-0720 7.8 HIGH 1 PoC Analysis EPSS 0.01

Android 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 - Remote Code Execution in Media Framework libhevc

A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37430213.

CWE-252 Aug 09, 2017 STIX 2.1

CVE-2017-0719 7.8 HIGH 1 PoC Analysis EPSS 0.01

Android 6.0 6.0.1 7.0 7.1.1 7.1.2 - Remote Code Execution in MPEG2 Decoder

A remote code execution vulnerability in the Android media framework (mpeg2 decoder). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37273673.

CWE-772 Aug 09, 2017 STIX 2.1

CVE-2017-0718 7.8 HIGH 1 PoC Analysis EPSS 0.01

Android 6.0 6.0.1 7.0 7.1.1 7.1.2 - Remote Code Execution in MPEG2 Decoder

A remote code execution vulnerability in the Android media framework (mpeg2 decoder). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37273547.

Aug 09, 2017 STIX 2.1

CVE-2017-0714 7.8 HIGH 1 PoC Analysis EPSS 0.01

Android 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 - Remote Code Execution in H263 Decoder

A remote code execution vulnerability in the Android media framework (h263 decoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36492637.

Aug 09, 2017 STIX 2.1

CVE-2017-0700 7.8 HIGH 1 PoC Analysis EPSS 0.01

Android 7.1.1-7.1.2 - Remote Code Execution in System UI

A remote code execution vulnerability in the Android system ui. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A-35639138.

Jul 06, 2017 STIX 2.1

CVE-2017-0691 5.5 MEDIUM 1 PoC Analysis EPSS 0.01

Android 7.0-7.1.2 - Denial of Service in Media Framework

A denial of service vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36724453.

CWE-190 Jul 06, 2017 STIX 2.1

CVE-2017-0678 7.8 HIGH 1 PoC Analysis EPSS 0.01

Android 7.0-7.1.2 - Remote Code Execution in Media Framework

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36576151.

Jul 06, 2017 STIX 2.1

CVE-2017-8244 7.0 HIGH 1 PoC Analysis EPSS 0.00

Android - Race Condition in MSMVIDC DebugFS Driver

In core_info_read and inst_info_read in all Android releases from CAF using the Linux kernel, variable "dbg_buf", "dbg_buf->curr" and "dbg_buf->filled_size" could be modified by different threads at the same time, but they are not protected with mutex or locks. Buffer overflow is possible on race conditions. "buffer->curr" itself could also be overwritten, which means that it may point to anywhere of kernel memory (for write).

CWE-362 May 12, 2017 STIX 2.1

CVE-2017-0624 5.5 MEDIUM 1 PoC Analysis EPSS 0.01

Android Kernel 3.10/3.18 - Info Disclosure

An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34327795. References: QC-CR#2005832.

CWE-200 May 12, 2017 STIX 2.1

CVE-2017-0553 7.0 HIGH 1 PoC Analysis EPSS 0.02

Android 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 - Elevation of Privilege via libnl Integer Overflow

An elevation of privilege vulnerability in libnl could enable a local malicious application to execute arbitrary code within the context of the Wi-Fi service. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32342065. NOTE: this issue also exists in the upstream libnl before 3.3.0 library.

CWE-190 Apr 07, 2017 STIX 2.1

Latest Vulnerabilities with Public Exploits

Investigate

Ecosystems

Reference Indexes

Recent Blog Posts

CVEForge Labs

KEV Gaps