DuckDuckGo
- Known vulnerabilities
- 3
- Still open
- 0
- KEV open
- 0
- Max CVSS (historical)
- 8.2
Cumulative exposure
Low
Aggregates open CVEs (40%) + KEV (30%) + critical shared permissions (15%) + trackers (10%) + OS EOL (5%). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Known vulnerabilities (CVE)
Latest matched CVE: 2022 · limited CPE coverage for this vendor — absence of recent CVEs is not a guarantee
Test a different version
| CVE |
|---|
|
CVE-2021-44683
Fixed
HIGH 8.2
Network Fixed in: 7.64.18
|
|
CVE-2020-15502
Fixed
HIGH 7.5
Network Fixed in: > 7.47.1.0
|
1 indeterminable CVE(s) hidden (missing current version or incompatible version schemes). · Show
Context
Context
Description
At DuckDuckGo, we believe the best way to protect your personal information from hackers, scammers, and privacy-invasive companies is to stop it from being collected at all. That's why millions of people choose DuckDuckGo over Chrome and other browsers to search and browse online. Our built-in search engine is like Google but never tracks your searches. Our browser blocks YouTube ads, invasive web ads, and cookie pop-ups, reducing distractions and helping to stop other companies from collecting your data. While our optional integrated AI features, Search Assist and Duck.ai, are private and never use your data to train AI. Oh, and our browser is free. We make money from privacy-respecting search ads, not by exploiting your data. Take back control of your personal information with the browser designed for data protection, not data collection. FEATURE HIGHLIGHTS Protect Your Searches by Default: DuckDuckGo Search comes built-in, so you can easily search online without being tracked. Shield Your Browsing History: Our 3rd-Party Tracker Loading Protection blocks most trackers before they load, greatly exceeding what most popular browsers offer by default.
Data collected and shared
Source: App Store · App Privacy · 4 data item(s) declared
Indicative classification based on data sensitivity. "Shared" = transmitted to third parties (publisher-declared).
FAQ
FAQ: DuckDuckGo
Does DuckDuckGo have known security vulnerabilities?
DuckDuckGo (com.duckduckgo.mobile.ios) on iOS has 3 CVE referenced in NVD, 0 still open on the current version and 0 listed in the CISA KEV catalog. Absence of a CVE is not a security guarantee.
Is the current version of DuckDuckGo affected by any open CVE?
Version 7.232.0 of DuckDuckGo on iOS has no open CVE referenced in NVD. Absence of a CVE is not a security guarantee.
Is DuckDuckGo affected by an actively exploited vulnerability (CISA KEV)?
No CVE affecting DuckDuckGo (com.duckduckgo.mobile.ios) is currently in the CISA KEV catalog.
What is the latest known version of DuckDuckGo?
The most recent version of DuckDuckGo (com.duckduckgo.mobile.ios) tracked by Appaloosa Scout is 7.232.0, published by Duck Duck Go, Inc..