Files

This hub aggregates every CVE we track for Files, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 6 most recently published vulnerabilities affecting Files.

• CVE-2025-54790Files: Potential for SQL Injection through File Browse and List Operations6.5Aug 1, 2025
• CVE-2025-54789Files is Vulnerable to Reflected Self-XSS through its File Move Functionality6.1Aug 1, 2025
• CVE-2009-0948Multiple buffer overflows in the (1) cdf_read_sat, (2) cdf_read_long_sector_chain, and (3) cdf_read_ssat function in file before 5.02.9.8Jun 2, 2021
• CVE-2009-0947Multiple integer overflows in the (1) cdf_read_property_info and (2) cdf_read_sat functions in file before 5.02.9.8Jun 2, 2021
• CVE-2017-2723The Files APP 7.1.1.308 and earlier versions in some Huawei mobile phones has a vulnerability of plaintext storage of users' Safe passwords. An attacker with the root privilege of an Android system...6.7Nov 22, 2017
• CVE-2017-2715The Files APP 7.1.1.309 and earlier versions in some Huawei mobile phones has a brute-force password cracking vulnerability due to the improper design of the Safe key database. An unauthorized atta...7.8Nov 22, 2017