BlackBerry

Products

Exploited and recent CVEs

• CVE-2026-18247 Medium 5.3 DOM-Based Cross-Site Scripting in BlackBerry AtHoc Web Portals 0.4%
• CVE-2026-18084 High 8.6 Cross-Site Scripting (XSS) in Management Console of BlackBerry UEM 0.3%
• CVE-2026-18085 Medium 5.9 Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM 0.3%
• CVE-2025-12766 Medium 5.0 Insecure Direct Object Reference (IDOR) vulnerability in the Management Console of affected versions of BlackBerry AtHoc. 0.2%
• CVE-2025-2474 Critical 9.8 Vulnerability in PCX Image Codec Impacts QNX Software Development Platform 0.8%
• CVE-2024-48858 High 7.5 Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform 0.6%
• CVE-2024-48857 High 7.5 Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform 0.5%
• CVE-2024-48856 Critical 9.8 Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform 0.6%
• CVE-2024-48855 Medium 5.3 Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform 0.4%
• CVE-2024-48854 Medium 5.3 Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform 0.4%
• CVE-2024-51723 Medium 4.6 Vulnerability in Management Console Impacts BlackBerry AtHoc 0.3%
• CVE-2024-51722 Medium 6.4 Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE 0.1%
• CVE-2024-51721 High 7.3 Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE 0.2%
• CVE-2024-51720 Medium 4.8 Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE 0.3%
• CVE-2024-35215 Medium 6.2 NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 and 7.0 could allow an attacker with local access to cause a 0.2%
• CVE-2024-35214 High 7.1 Vulnerability in CylanceOPTICS Windows Installer Package Impacts CylanceOPTICS for Windows 0.2%
• CVE-2024-35213 Critical 9.0 Vulnerability in SGI Image Codec Impacts BlackBerry QNX Software Development Platform (SDP) 0.5%
• CVE-2023-32701 High 7.1 Vulnerability in Networking Stack Impacts QNX Software Development Platform (SDP) 0.2%
• CVE-2023-21520 Unrated A PII Enumeration via Credential Recovery in the Self Service (Credential Recovery) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially associate a list of c 0.5%
• CVE-2023-21523 Unrated A Stored Cross-site Scripting (XSS) vulnerability in the Management Console (User Management and Alerts) of BlackBerry AtHoc version 7.15 could allow an attacker to execute scri 0.4%
• CVE-2023-21522 Unrated A Reflected Cross-site Scripting (XSS) vulnerability in the Management Console (Reports) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially control a script that is executed in t 0.4%
• CVE-2023-21521 Unrated An SQL Injection vulnerability in the Management Console  (Operator Audit Trail) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially read sensitive data from the database, modify 0.6%
• CVE-2021-32025 High 8.1 An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Platform version(s) 6.4.0 to 7.0, QNX Momentics all 6.3.x versions, QNX OS for Safet 0.2%
• CVE-2021-32024 Critical 9.8 A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process. 1.8%
• CVE-2021-22156 Critical 9.0 An integer overflow vulnerability in the calloc() function of the C runtime library of affected versions of BlackBerry® QNX Software Development Platform (SDP) version(s) 6.5.0SP1 and earlier, QNX OS 1.8%
• CVE-2020-6932 Critical 10.0 An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to poten 3.6%