Login Request a demo
FO
Product
Fire OS
by Amazon · last CVE Feb 26, 2024
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 1High 8Medium 4Low 0
Severity
All severities13Critical1High8Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Fire OS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-1385
8.8
0%
May 3
Improper JPAKE implementation allows offline PIN brute-forcing due to the initialization of random values to a known value, which leads to unauthorized authentication to…
Affected: before 6.2.9.5; before 7.6.3.3
CVE-2018-11025
7.5
3%
Oct 16
kernel/omap/drivers/mfd/twl6030-gpadc.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an…
Affected: 4.5.5.3
CVE-2018-11024
7.5
3%
Oct 16
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument…
Affected: 4.5.5.3
CVE-2018-11023
7.5
3%
Oct 16
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument…
Affected: 4.5.5.3
CVE-2018-11022
7.5
3%
Oct 16
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of…
Affected: 4.5.5.3
CVE-2018-11021
7.5
3%
Oct 16
kernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the…
Affected: 4.5.5.3
CVE-2018-11019
7.5
3%
Oct 16
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of…
Affected: 4.5.5.3
CVE-2019-7399
7.4
1%
Feb 17
Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pages
Affected: before 5.3.6.4
Showing 8