Exploited vulnerabilities

Android

17 Android vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue17
Last 12 months3
In ransomware campaigns0
Last addition2 June 2026

The vulnerabilities17

  1. 2 June 2026CVE-2025-48595FrameworkAndroid Framework Integer Overflow Vulnerability
  2. 2 December 2025CVE-2025-48633FrameworkAndroid Framework Information Disclosure Vulnerability
  3. 2 December 2025CVE-2025-48572FrameworkAndroid Framework Privilege Escalation Vulnerability
  4. 4 September 2025CVE-2025-48543RuntimeAndroid Runtime Use-After-Free Vulnerability
  5. 7 November 2024CVE-2024-43093FrameworkAndroid Framework Privilege Escalation Vulnerability
  6. 7 August 2024CVE-2024-36971KernelAndroid Kernel Remote Code Execution Vulnerability
  7. 13 June 2024CVE-2024-32896PixelAndroid Pixel Privilege Escalation Vulnerability
  8. 4 April 2024CVE-2024-29748PixelAndroid Pixel Privilege Escalation Vulnerability
  9. 4 April 2024CVE-2024-29745PixelAndroid Pixel Information Disclosure Vulnerability
  10. 5 March 2024CVE-2023-21237PixelAndroid Pixel Information Disclosure Vulnerability
  11. 13 September 2023CVE-2023-35674FrameworkAndroid Framework Privilege Escalation Vulnerability
  12. 13 April 2023CVE-2023-20963FrameworkAndroid Framework Privilege Escalation Vulnerability
  13. 8 September 2022CVE-2011-1823Android OSAndroid OS Privilege Escalation Vulnerability
  14. 23 May 2022CVE-2021-1048KernelAndroid Kernel Use-After-Free Vulnerability
  15. 23 May 2022CVE-2021-0920KernelAndroid Kernel Race Condition Vulnerability
  16. 3 November 2021CVE-2020-0041Android KernelAndroid Kernel Out-of-Bounds Write Vulnerability
  17. 3 November 2021CVE-2019-2215Android KernelAndroid Kernel Use-After-Free Vulnerability

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, Android included.

All vendorsThe catalogue on the CISA website