# cve.now: Blackberry

The newest entries naming Blackberry as an affected vendor (up to 200), of 56 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-50077](https://cve.now/CVE-2026-50077.md): Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for Safety (CVSS 7.7)
- [CVE-2026-50078](https://cve.now/CVE-2026-50078.md): Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for Safety (CVSS 4.4)
- [CVE-2026-50079](https://cve.now/CVE-2026-50079.md): Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for Safety (CVSS 3.3)
- [CVE-2026-50080](https://cve.now/CVE-2026-50080.md): Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for Safety (CVSS 3.3)
- [CVE-2026-40273](https://cve.now/CVE-2026-40273.md): Vulnerabilities in the QNX Neutrino kernel affect QNX Software Development Platform and QNX OS for Safety (CVSS 4.0)
- [CVE-2026-40274](https://cve.now/CVE-2026-40274.md): Vulnerabilities in the QNX Neutrino kernel affect QNX Software Development Platform and QNX OS for Safety (CVSS 4.0)
- [CVE-2026-40275](https://cve.now/CVE-2026-40275.md): Vulnerabilities in the QNX Neutrino kernel affect QNX Software Development Platform and QNX OS for Safety (CVSS 8.4)
- [CVE-2026-54436](https://cve.now/CVE-2026-54436.md): Vulnerabilities in the QNX io-char library Impacts QNX Software Development Platform (CVSS 7.4)
- [CVE-2026-54437](https://cve.now/CVE-2026-54437.md): Vulnerabilities in the QNX io-char library Impacts QNX Software Development Platform (CVSS 6.2)
- [CVE-2026-18247](https://cve.now/CVE-2026-18247.md): DOM-Based Cross-Site Scripting in BlackBerry AtHoc Web Portals (CVSS 5.3)
- [CVE-2026-40272](https://cve.now/CVE-2026-40272.md): Vulnerability in the QNX libtraceparser Impacts QNX Software Development Platform (CVSS 7.0)
- [CVE-2026-18084](https://cve.now/CVE-2026-18084.md): Cross-Site Scripting (XSS) in Management Console of BlackBerry UEM (CVSS 8.6)
- [CVE-2026-18085](https://cve.now/CVE-2026-18085.md): Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM (CVSS 5.9)
- [CVE-2026-4018](https://cve.now/CVE-2026-4018.md): TOCTOU race condition in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for Safety (CVSS 6.4)
- [CVE-2026-4017](https://cve.now/CVE-2026-4017.md): Buffer overflow in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for Safety (CVSS 7.4)
- [CVE-2026-0515](https://cve.now/CVE-2026-0515.md): Insufficient parameter validation in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for Safety (CVSS 6.2)
- [CVE-2025-8090](https://cve.now/CVE-2025-8090.md): Vulnerability in the QNX Neutrino Kernel impacts the QNX Software Development Platform and QNX OS for Safety (CVSS 6.2)
- [CVE-2025-12766](https://cve.now/CVE-2025-12766.md): Insecure Direct Object Reference (IDOR) vulnerability in the Management Console of affected versions of BlackBerry AtHoc. (CVSS 5.0)
- [CVE-2025-2474](https://cve.now/CVE-2025-2474.md): Vulnerability in PCX Image Codec Impacts QNX Software Development Platform (CVSS 9.8)
- [CVE-2024-48858](https://cve.now/CVE-2024-48858.md): Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform (CVSS 7.5)
- [CVE-2024-48857](https://cve.now/CVE-2024-48857.md): Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform (CVSS 7.5)
- [CVE-2024-48856](https://cve.now/CVE-2024-48856.md): Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform (CVSS 9.8)
- [CVE-2024-48855](https://cve.now/CVE-2024-48855.md): Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform (CVSS 5.3)
- [CVE-2024-48854](https://cve.now/CVE-2024-48854.md): Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform (CVSS 5.3)
- [CVE-2024-51723](https://cve.now/CVE-2024-51723.md): Vulnerability in Management Console Impacts BlackBerry AtHoc (CVSS 4.6)
- [CVE-2024-51722](https://cve.now/CVE-2024-51722.md): Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE (CVSS 6.4)
- [CVE-2024-51721](https://cve.now/CVE-2024-51721.md): Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE (CVSS 7.3)
- [CVE-2024-51720](https://cve.now/CVE-2024-51720.md): Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE (CVSS 4.8)
- [CVE-2024-35215](https://cve.now/CVE-2024-35215.md): NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 a (CVSS 6.2)
- [CVE-2024-35214](https://cve.now/CVE-2024-35214.md): Vulnerability in CylanceOPTICS Windows Installer Package Impacts CylanceOPTICS for Windows (CVSS 7.1)
- [CVE-2024-35213](https://cve.now/CVE-2024-35213.md): Vulnerability in SGI Image Codec Impacts BlackBerry QNX Software Development Platform (SDP) (CVSS 9.0)
- [CVE-2023-32701](https://cve.now/CVE-2023-32701.md): Vulnerability in Networking Stack Impacts QNX Software Development Platform (SDP) (CVSS 7.1)
- [CVE-2023-21520](https://cve.now/CVE-2023-21520.md): A PII Enumeration via Credential Recovery in the Self Service (Credential Recovery) of BlackBerry AtHoc version 7.15 (no CVSS)
- [CVE-2023-21523](https://cve.now/CVE-2023-21523.md): A Stored Cross-site Scripting (XSS) vulnerability in the Management Console (User Management and Alerts) of BlackBerr (no CVSS)
- [CVE-2023-21522](https://cve.now/CVE-2023-21522.md): A Reflected Cross-site Scripting (XSS) vulnerability in the Management Console (Reports) of BlackBerry AtHoc version 7.15 could allow an at (no CVSS)
- [CVE-2023-21521](https://cve.now/CVE-2023-21521.md): An SQL Injection vulnerability in the Management Console (Operator Audit Trail) of BlackBerry AtHoc version 7.15 could allow an attacker t (no CVSS)
- [CVE-2021-32025](https://cve.now/CVE-2021-32025.md): An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Platform version(s) 6.4. (CVSS 8.1)
- [CVE-2021-32024](https://cve.now/CVE-2021-32024.md): A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentia (CVSS 9.8)
- [CVE-2021-22156](https://cve.now/CVE-2021-22156.md): An integer overflow vulnerability in the calloc() function of the C runtime library of affected versions of BlackBerry® QNX Software Develop (CVSS 9.0)
- [CVE-2020-6932](https://cve.now/CVE-2020-6932.md): An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platf (CVSS 10.0)
- [CVE-2019-8998](https://cve.now/CVE-2019-8998.md): An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of (CVSS 7.8)
- [CVE-2018-8892](https://cve.now/CVE-2018-8892.md): A cross-site request forgery (CSRF) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an at (no CVSS)
- [CVE-2018-8891](https://cve.now/CVE-2018-8891.md): Multiple stored cross-site scripting (XSS) vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could al (no CVSS)
- [CVE-2018-8888](https://cve.now/CVE-2018-8888.md): A stored cross-site scripting (XSS) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an a (no CVSS)
- [CVE-2018-8890](https://cve.now/CVE-2018-8890.md): An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a (no CVSS)
- [CVE-2018-8889](https://cve.now/CVE-2018-8889.md): A directory traversal vulnerability in the Connect Service of the BlackBerry Enterprise Mobility Server (BEMS) 2.8.17.29 and earlier could a (no CVSS)
- [CVE-2017-17442](https://cve.now/CVE-2017-17442.md): In BlackBerry UEM Management Console version 12.7.1 and earlier, a reflected cross-site scripting vulnerability that could allow an attacker (no CVSS)
- [CVE-2017-9371](https://cve.now/CVE-2017-9371.md): In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default conf (CVSS 2.6)
- [CVE-2017-9369](https://cve.now/CVE-2017-9369.md): In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, an information disclosure vulnerability in the defaul (CVSS 3.8)
- [CVE-2017-3893](https://cve.now/CVE-2017-3893.md): Incomplete vulnerability mitigations (CVSS 1.9)
- [CVE-2017-3892](https://cve.now/CVE-2017-3892.md): In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an information disclosure vulnerability in the default configuration of the QNX (CVSS 3.8)
- [CVE-2017-3891](https://cve.now/CVE-2017-3891.md): In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default configuration of the QNX (CVSS 9.6)
- [CVE-2017-9368](https://cve.now/CVE-2017-9368.md): An information disclosure vulnerability in the BlackBerry Workspaces Server could result in an attacker gaining access to source code for se (no CVSS)
- [CVE-2017-9367](https://cve.now/CVE-2017-9367.md): A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary f (no CVSS)
- [CVE-2017-9370](https://cve.now/CVE-2017-9370.md): An information disclosure / elevation of privilege vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker who (no CVSS)
- [CVE-2017-3894](https://cve.now/CVE-2017-3894.md): A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.6.1 and earlier, and (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/blackberry
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.