Vendor
Android
As of , 17 Android vulnerabilities are on CISA's list of exploited vulnerabilities; 1 was added in 2026. Patch first: CVE-2019-2215.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2019-2215Use-After-Free | Android Android Kernel | Patch this weekMetasploit module; EPSS 0.72; verified Exploit-DB entry | 0.72 | ||
| 2 | CVE-2011-1823Privilege Escalation | Android Android OS | Patch soon | 0.41 | ||
| 3 | CVE-2020-0041Out-of-Bounds Write | Android Android Kernel | Patch soon | 0.03 | ||
| 4 | CVE-2024-32896Privilege Escalation | Android Pixel | Patch soon | 0.03 | ||
| 5 | CVE-2024-36971Remote Code Execution | Android Kernel | Patch soon | 0.03 | ||
| 6 | CVE-2023-35674Privilege Escalation | Android Framework | Patch soon | 0.03 | ||
| 7 | CVE-2025-48595Integer Overflow | Android Framework | Patch soon | 0.02 | ||
| 8 | CVE-2023-20963Privilege Escalation | Android Framework | Patch soon | 0.01 | ||
| 9 | CVE-2021-1048Use-After-Free | Android Kernel | Patch soon | 0.01 | ||
| 10 | CVE-2021-0920Race Condition | Android Kernel | Patch soon | 0.01 | ||
| 11 | CVE-2024-43093Privilege Escalation | Android Framework | Patch soon | 0.01 | ||
| 12 | CVE-2024-29748Privilege Escalation | Android Pixel | Patch soon | 0.01 | ||
| 13 | CVE-2025-48543Use-After-Free | Android Runtime | Patch soon | 0.01 | ||
| 14 | CVE-2024-29745Information Disclosure | Android Pixel | Patch soon | 0.00 | ||
| 15 | CVE-2025-48572Privilege Escalation | Android Framework | Patch soon | 0.00 | ||
| 16 | CVE-2025-48633Information Disclosure | Android Framework | Patch soon | 0.00 | ||
| 17 | CVE-2023-21237Information Disclosure | Android Pixel | Patch soon | 0.00 |
Products
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2021 | 2 |
| 2022 | 3 |
| 2023 | 2 |
| 2024 | 6 |
| 2025 | 3 |
| 2026 | 1 |