Exploited vulnerabilities
Android
17 Android vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue17
Last 12 months3
In ransomware campaigns0
Last addition2 June 2026
The vulnerabilities17
- 2 June 2026CVE-2025-48595FrameworkAndroid Framework Integer Overflow Vulnerability
- 2 December 2025CVE-2025-48633FrameworkAndroid Framework Information Disclosure Vulnerability
- 2 December 2025CVE-2025-48572FrameworkAndroid Framework Privilege Escalation Vulnerability
- 4 September 2025CVE-2025-48543RuntimeAndroid Runtime Use-After-Free Vulnerability
- 7 November 2024CVE-2024-43093FrameworkAndroid Framework Privilege Escalation Vulnerability
- 7 August 2024CVE-2024-36971KernelAndroid Kernel Remote Code Execution Vulnerability
- 13 June 2024CVE-2024-32896PixelAndroid Pixel Privilege Escalation Vulnerability
- 4 April 2024CVE-2024-29748PixelAndroid Pixel Privilege Escalation Vulnerability
- 4 April 2024CVE-2024-29745PixelAndroid Pixel Information Disclosure Vulnerability
- 5 March 2024CVE-2023-21237PixelAndroid Pixel Information Disclosure Vulnerability
- 13 September 2023CVE-2023-35674FrameworkAndroid Framework Privilege Escalation Vulnerability
- 13 April 2023CVE-2023-20963FrameworkAndroid Framework Privilege Escalation Vulnerability
- 8 September 2022CVE-2011-1823Android OSAndroid OS Privilege Escalation Vulnerability
- 23 May 2022CVE-2021-1048KernelAndroid Kernel Use-After-Free Vulnerability
- 23 May 2022CVE-2021-0920KernelAndroid Kernel Race Condition Vulnerability
- 3 November 2021CVE-2020-0041Android KernelAndroid Kernel Out-of-Bounds Write Vulnerability
- 3 November 2021CVE-2019-2215Android KernelAndroid Kernel Use-After-Free Vulnerability
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, Android included.