Read the docs

GrapheneOS

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

GrapheneOS records in CISA KEV

No GrapheneOS vulnerabilities are listed in CISA KEV.

Records

1 record

Priority MEDIUM 45

GrapheneOS before 2026050400 allows attackers to discover the real IP address of a VPN user as a consequence of a registerQuicConnectionClosePayload optimization, because an application can let system_server transmit UDP…

CVSS 3.1LOW 2.2 Local Low privileges User interaction EPSS 0.00094 Published 2026-05-09 Fixed in 2026050400 CWE-441
Open these records in search →