Product of Android

Framework

As of , 6 Android Framework vulnerabilities are on CISA's list of exploited vulnerabilities; 1 was added in 2026. Patch first: CVE-2023-35674.

Patch first

Patch first
#VulnerabilityProductOur groupListedDeadlineEPSS
1CVE-2023-35674Privilege EscalationAndroid FrameworkPatch soon0.03
2CVE-2025-48595Integer OverflowAndroid FrameworkPatch soon0.02
3CVE-2023-20963Privilege EscalationAndroid FrameworkPatch soon0.01
4CVE-2024-43093Privilege EscalationAndroid FrameworkPatch soon0.01
5CVE-2025-48572Privilege EscalationAndroid FrameworkPatch soon0.00
6CVE-2025-48633Information DisclosureAndroid FrameworkPatch soon0.00

Added each year

0.511.522023: 2220232024: 1120242025: 2220252026: 112026
Entries CISA added each year, removed ones included. Source: CISA KEV.
Show the numbers
Periodentries added
20232
20241
20252
20261

Used in ransomware