Android
Vulnerability activity for Android: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 3
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 3
- With exploit code
- 0
Next expected patch release
Android Security Bulletin
Nov 2, 2026, in 4 days (approximate, can shift for holidays)
Expected from the vendor's usual schedule; vendors can shift dates.
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 8.4HighJun 2, 2026Android Framework Memory corruptionCVE-2025-48595Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.Added to KEV Jun 2, 2026Exploited1.9% likely
- 7.8HighDec 2, 2025Android Framework Privilege escalationCVE-2025-48572Android Framework contains an unspecified vulnerability that allows for privilege escalation.Added to KEV Dec 2, 2025Exploited
- 5.5MediumDec 2, 2025Android Framework Information disclosureCVE-2025-48633Android Framework contains an unspecified vulnerability that allows for information disclosure.Added to KEV Dec 2, 2025Exploited
- 8.8HighSep 4, 2025Android Runtime Memory corruptionCVE-2025-48543Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation.Added to KEV Sep 4, 2025 · same day as publicationExploited
- 7.3HighNov 13, 2024Android Framework Privilege escalationCVE-2024-43093Android Framework contains an unspecified vulnerability that allows for privilege escalation.Added to KEV Nov 7, 2024 · same day as publicationExploited
- 7.8HighJun 10, 2024Android Kernel Memory corruptionCVE-2024-36971Android contains an unspecified vulnerability in the kernel that allows for remote code execution. This vulnerability resides in Linux Kernel and could impact other products, including but not limited to Android OS.Added to KEV Aug 7, 2024 · 58 days after publicationExploited2.7% likely
- 8.1HighJun 13, 2024Android Pixel Privilege escalationCVE-2024-32896Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation.Added to KEV Jun 13, 2024 · same day as publicationExploited3% likely
- 5.5MediumApr 5, 2024Android Pixel Memory corruptionCVE-2024-29745Android Pixel contains an information disclosure vulnerability in the fastboot firmware used to support unlocking, flashing, and locking affected devices.Added to KEV Apr 4, 2024 · same day as publicationExploited
- 7.8HighApr 5, 2024Android Pixel Privilege escalationCVE-2024-29748Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin app.Added to KEV Apr 4, 2024 · same day as publicationExploited
- 6.2MediumJun 28, 2023Android Pixel Information disclosureCVE-2023-21237Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information.Added to KEV Mar 5, 2024 · 251 days after publicationExploited
- 8.8HighSep 11, 2023Android Framework Privilege escalationCVE-2023-35674Android Framework contains an unspecified vulnerability that allows for privilege escalation.Added to KEV Sep 13, 2023 · 1 day after publicationExploited2.6% likely
- 7.8HighMar 24, 2023Android Framework Crypto / certificateCVE-2023-20963Android Framework contains an unspecified vulnerability that allows for privilege escalation after updating an app to a higher Target SDK with no additional execution privileges needed.Added to KEV Apr 13, 2023 · 20 days after publicationExploited1.5% likely
- 7.8HighJun 9, 2011Android OS Privilege escalationCVE-2011-1823The vold volume manager daemon in Android kernel trusts messages from a PF_NETLINK socket, which allows an attacker to execute code and gain root privileges. This vulnerability is associated with GingerBreak and Exploit.AndroidOS.Lotoor.Added to KEV Sep 8, 2022 · 4,109 days after publicationExploited41% likely
- 6.4MediumDec 15, 2021Android KernelCVE-2021-0920Android kernel contains a race condition, which allows for a use-after-free vulnerability. Exploitation can allow for privilege escalation.Added to KEV May 23, 2022 · 158 days after publicationExploited
- 7.8HighDec 15, 2021Android Kernel Memory corruptionCVE-2021-1048Android kernel contains a use-after-free vulnerability that allows for privilege escalation.Added to KEV May 23, 2022 · 158 days after publicationExploited1.1% likely
- 7.8HighMar 10, 2020Android Kernel Memory corruptionCVE-2020-0041Android Kernel binder_transaction of binder.c contains an out-of-bounds write vulnerability due to an incorrect bounds check that could allow for local privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0069 under exploit chain "AbstractEmu."Added to KEV Nov 3, 2021 · 602 days after publicationExploited3.2% likely
- 7.8HighOct 11, 2019Android Kernel Memory corruptionCVE-2019-2215Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain "AbstractEmu."Added to KEV Nov 3, 2021 · 753 days after publicationExploited72% likelyExploit codeExploit-DB · Metasploit
Recent
- 8.4HighJun 2, 2026Android Framework Memory corruptionCVE-2025-48595Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.Exploited1.9% likely
- 5.5MediumDec 2, 2025Android Framework Information disclosureCVE-2025-48633Android Framework contains an unspecified vulnerability that allows for information disclosure.Exploited
- 7.8HighDec 2, 2025Android Framework Privilege escalationCVE-2025-48572Android Framework contains an unspecified vulnerability that allows for privilege escalation.Exploited
- 8.8HighSep 4, 2025Android Runtime Memory corruptionCVE-2025-48543Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation.Exploited
- 7.3HighNov 13, 2024Android Framework Privilege escalationCVE-2024-43093Android Framework contains an unspecified vulnerability that allows for privilege escalation.Exploited
- 7.8HighJun 10, 2024Android Kernel Memory corruptionCVE-2024-36971Android contains an unspecified vulnerability in the kernel that allows for remote code execution. This vulnerability resides in Linux Kernel and could impact other products, including but not limited to Android OS.Exploited2.7% likely
- 8.1HighJun 13, 2024Android Pixel Privilege escalationCVE-2024-32896Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation.Exploited3% likely
- 7.8HighApr 5, 2024Android Pixel Privilege escalationCVE-2024-29748Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin app.Exploited
- 5.5MediumApr 5, 2024Android Pixel Memory corruptionCVE-2024-29745Android Pixel contains an information disclosure vulnerability in the fastboot firmware used to support unlocking, flashing, and locking affected devices.Exploited
- 6.2MediumJun 28, 2023Android Pixel Information disclosureCVE-2023-21237Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information.Exploited
- 8.8HighSep 11, 2023Android Framework Privilege escalationCVE-2023-35674Android Framework contains an unspecified vulnerability that allows for privilege escalation.Exploited2.6% likely
- 7.8HighMar 24, 2023Android Framework Crypto / certificateCVE-2023-20963Android Framework contains an unspecified vulnerability that allows for privilege escalation after updating an app to a higher Target SDK with no additional execution privileges needed.Exploited1.5% likely
- 7.8HighJun 9, 2011Android OS Privilege escalationCVE-2011-1823The vold volume manager daemon in Android kernel trusts messages from a PF_NETLINK socket, which allows an attacker to execute code and gain root privileges. This vulnerability is associated with GingerBreak and Exploit.AndroidOS.Lotoor.Exploited41% likely
- 7.8HighDec 15, 2021Android Kernel Memory corruptionCVE-2021-1048Android kernel contains a use-after-free vulnerability that allows for privilege escalation.Exploited1.1% likely
- 6.4MediumDec 15, 2021Android KernelCVE-2021-0920Android kernel contains a race condition, which allows for a use-after-free vulnerability. Exploitation can allow for privilege escalation.Exploited
- 7.8HighOct 11, 2019Android Kernel Memory corruptionCVE-2019-2215Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain "AbstractEmu."Exploited72% likelyExploit codeExploit-DB · Metasploit
- 7.8HighMar 10, 2020Android Kernel Memory corruptionCVE-2020-0041Android Kernel binder_transaction of binder.c contains an out-of-bounds write vulnerability due to an incorrect bounds check that could allow for local privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0069 under exploit chain "AbstractEmu."Exploited3.2% likely
Top products
- Framework3 CVEs in the last year, 3 exploited
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.