NVD disclosure day
CVE-2025-21479
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A memory corruption vulnerability in Qualcomm chipsets could allow unauthorized command execution in the GPU micronode. This impacts organizations using affected devices and presents a risk of data compromise and system disruption. Applying vendor-provided mitigations is recommended.
CVE-2025-27038
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A memory corruption vulnerability impacts Qualcomm chipsets when rendering graphics in Chrome. This could lead to data corruption, affecting system integrity and posing a business risk to organizations utilizing affected hardware. Mitigation guidance is available from Qualcomm.
CVE-2025-21480
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
The vulnerability affects Qualcomm chipsets, allowing for memory corruption through unauthorized command execution. This poses a risk of compromised confidentiality, integrity, and availability of data and systems. The vulnerability has been added to the CISA Known Exploited Vulnerabilities catalog.
CVE-2025-5419
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in web browsers may allow attackers to corrupt memory via a crafted web page, potentially affecting system data and operations. Organizations should identify and secure affected browsers to mitigate this risk.