Skip to content
October 24, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Qualcomm mobile processors are vulnerable to the CPU holes, the patch will come soon
  • News

Qualcomm mobile processors are vulnerable to the CPU holes, the patch will come soon

Do Son January 6, 2018 2 minutes read
Add Daily CyberSecurity as a preferred source on Google

According to CNBC on January 6, Qualcomm said on Friday that it is developing and updating products that have been affected by recent chip-level security breaches.

Image: Qualcomm

Earlier this week, the vulnerabilities were disclosed by security researchers at Google and other organizations and spread to Intel chips, causing Intel’s market value to have evaporated over $11 billion in two days. It also forced many software and cloud services company release updates to fix vulnerabilities, including Amazon, Apple, IBM, Weiruan company.

One of these two vulnerabilities is Meltdown, which affected Intel’s processor; the other is Specter, which affects Intel, AMD and ARM architecture chips. Qualcomm’s chip is based on the ARM architecture.

“We are actively incorporating and deploying mitigations against the vulnerabilities for our impacted products, and we continue to work to strengthen them as possible,” a spokesperson told CNBC in an email. “We are in the process of deploying these mitigations to our customers and encourage people to update their devices when patches become available.”

Qualcomm spokesman did not specify which products have been affected, but the upcoming Snapdragon 845 chip is likely to be included because it is expected to use the ARM Cortex-A75 core, which is affected by the vulnerability.

Source: CNBC

Related coverage

  • Cards on the Dark Web: Payment Fraud Booms Back in 2023
  • China-Linked APT15 developed a new version of MirageFox malware
  • CISA Warns of Active Exploitation of Windows Kernel Vulnerability
  • Mitel Issues Critical Fixes for XSS Vulnerabilities in MiContact Center Business
  • Intel Downfall Fallout: Processor Purchasers File Lawsuits Over Security Flaws
  • CVE-2024-9693: GitLab Issues Critical Patch for Kubernetes Agent
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our zero-day alerts and CVE reports helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Tags: Qualcomm CPU holes

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2014-125133CVSS 8.7
    NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2015-20128CVSS 8.8
    FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2016-20104CVSS 8.7
    EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthenticated attackers to...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2026-110447CVSS 9.2
    Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in...
    CISA KEV📅 Added to KEV: Oct 23, 2026
  • CVE-2026-114625CVSS 9.9
    VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access...
    CISA KEV📅 Added to KEV: Oct 23, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-115806CVSS 9.8
    The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all...
    📅 Updated: Oct 24, 2026
  • CVE-2026-79855CVSS 9.8
    An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent existing...
    📅 Updated: Oct 24, 2026
  • CVE-2026-79856CVSS 9.8
    A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote attacker...
    📅 Updated: Oct 24, 2026
  • CVE-2026-79857CVSS 9.8
    There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8 that...
    📅 Updated: Oct 24, 2026
  • CVE-2026-79858CVSS 9.8
    An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated...
    📅 Updated: Oct 24, 2026
  • CVE-2026-79852CVSS 9.8
    A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct SQL...
    📅 Updated: Oct 24, 2026
  • CVE-2026-79854CVSS 9.8
    A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection...
    📅 Updated: Oct 24, 2026
  • CVE-2026-105014CVSS 9.1
    Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker...
    📅 Updated: Oct 24, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.