Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE  (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2023-52097

Publication date:
18/02/2024
Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploitation of this vulnerability may affect service confidentiality.
Severity CVSS v4.0: Pending analysis
Last modification:
13/03/2025

CVE-2023-52357

Publication date:
18/02/2024
Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploitation of this vulnerability may affect availability.
Severity CVSS v4.0: Pending analysis
Last modification:
06/12/2024

CVE-2023-52358

Publication date:
18/02/2024
Vulnerability of configuration defects in some APIs of the audio module.Successful exploitation of this vulnerability may affect availability.
Severity CVSS v4.0: Pending analysis
Last modification:
13/03/2025

CVE-2023-52360

Publication date:
18/02/2024
Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity.
Severity CVSS v4.0: Pending analysis
Last modification:
17/03/2025

CVE-2023-52361

Publication date:
18/02/2024
The VerifiedBoot module has a vulnerability that may cause authentication errors.Successful exploitation of this vulnerability may affect integrity.
Severity CVSS v4.0: Pending analysis
Last modification:
09/12/2024

CVE-2023-52362

Publication date:
18/02/2024
Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability.
Severity CVSS v4.0: Pending analysis
Last modification:
13/03/2025

CVE-2023-52363

Publication date:
18/02/2024
Vulnerability of defects introduced in the design process in the Control Panel module.Successful exploitation of this vulnerability may cause app processes to be started by mistake.
Severity CVSS v4.0: Pending analysis
Last modification:
27/03/2025

CVE-2023-52365

Publication date:
18/02/2024
Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.
Severity CVSS v4.0: Pending analysis
Last modification:
13/03/2025

CVE-2023-52387

Publication date:
18/02/2024
Resource reuse vulnerability in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality.
Severity CVSS v4.0: Pending analysis
Last modification:
27/03/2025

CVE-2024-25113

Publication date:
17/02/2024
Rejected reason: This CVE was misassigned. See CVE-2023-47623 for the canonical reference.
Severity CVSS v4.0: Pending analysis
Last modification:
17/02/2024

CVE-2022-41737

Publication date:
17/02/2024
IBM Storage Scale Container Native Storage Access 5.1.2.1 through 5.1.7.0 could allow a local attacker to initiate connections from a container outside the current namespace. IBM X-Force ID: 237811.
Severity CVSS v4.0: Pending analysis
Last modification:
31/12/2024

CVE-2022-41738

Publication date:
17/02/2024
IBM Storage Scale Container Native Storage Access 5.1.2.1 -through 5.1.7.0 could allow an attacker to initiate connections to containers from external networks. IBM X-Force ID: 237812.
Severity CVSS v4.0: Pending analysis
Last modification:
31/12/2024