Milos
Vendor:
First CVE: Feb 2, 2026 · Active for under a year
32
Total CVEs
More Total CVEs than 96% of tracked products
32.0
Avg CVEs / Year
Higher CVE frequency than 99% of tracked products
7.5
Avg CVSS
Higher Avg CVSS than 59% of tracked products
3.1%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Milos over time
Volume of CVEsAvg CVSS Base Score
First CVE
Feb 2, 2026
5 months ago
Most Recent CVE
Jun 1, 2026
54 days ago
CVE Severity & Scoring
Milos32 CVEs
9%
91%
All CVEs352,427 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local19 (59.4%)
Network6 (18.8%)
Unknown0 (0.0%)
Physical5 (15.6%)
Adjacent Network2 (6.3%)
Attack Complexity
Low28 (87.5%)
High4 (12.5%)
Unknown0 (0.0%)
User Interaction
None29 (90.6%)
Unknown0 (0.0%)
Required3 (9.4%)
Privileges Required
Low18 (56.3%)
High10 (31.3%)
None4 (12.5%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (32 CVEs).
32 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-21385HIGH Memory corruption while using alignments for memory allocation. | Mar 2, 2026 | 7.8 | 73 | YES | NO |
CVE-2026-24088HIGH Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader. | Jun 1, 2026 | 8.2 | 34 | NO | NO |
CVE-2025-59604HIGH Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer. | Jun 1, 2026 | 7.8 | 33 | NO | NO |
CVE-2026-24082HIGH Memory Corruption when copying data from a freed source while executing performance counter deselect operation. | May 4, 2026 | 7.8 | 33 | NO | NO |
CVE-2026-24087HIGH Memory corruption while processing fastboot OEM commands. | Jun 1, 2026 | 7.2 | 29 | NO | NO |
CVE-2025-47404HIGH Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified. | May 4, 2026 | 7.8 | 29 | NO | NO |
CVE-2025-47392HIGH Memory corruption when decoding corrupted satellite data files with invalid signature offsets. | Apr 6, 2026 | 8.8 | 29 | NO | NO |
CVE-2025-47403HIGH Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming. | May 4, 2026 | 7.5 | 28 | NO | NO |
CVE-2025-47401HIGH Transient DOS when processing target power rate tables during channel configuration. | May 4, 2026 | 7.5 | 28 | NO | NO |
CVE-2026-24092HIGH Memory Corruption when processing fastboot commands to set display mode. | Jun 1, 2026 | 7.2 | 27 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (32 CVEs).
CISA KEV
1 CVE
3.1% of CVEs· 97th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (32 CVEs).
Media Mentions
Signals from CVEs in this product scope (32 CVEs).
Top CNAs Publishing CVEs For Milos
Top CWEs
Versions
No cataloged versions.