Cyberfeed6 › Vendors › Android
CISA lists 17 Android vulnerabilities as exploited in real attacks. Most entries concern Framework, Pixel, Kernel, Android Kernel.
Showing the 17 most recently added of 17. Check the vendor notice before you act: it names the fixed versions.
| Vulnerability | Product | Added to list | Severity | Ransomware | Fix |
|---|---|---|---|---|---|
| CVE-2025-48595Android Framework Integer Overflow Vulnerability | Framework | 2026-06-02 | High (8.4) | No | Vendor notice |
| CVE-2025-48633Android Framework Information Disclosure Vulnerability | Framework | 2025-12-02 | Medium (5.5) | No | Vendor notice |
| CVE-2025-48572Android Framework Privilege Escalation Vulnerability | Framework | 2025-12-02 | High (7.8) | No | Vendor notice |
| CVE-2025-48543Android Runtime Use-After-Free Vulnerability | Runtime | 2025-09-04 | High (8.8) | No | Vendor notice |
| CVE-2024-43093Android Framework Privilege Escalation Vulnerability | Framework | 2024-11-07 | High (7.3) | No | Vendor notice |
| CVE-2024-36971Android Kernel Remote Code Execution Vulnerability | Kernel | 2024-08-07 | High (7.8) | No | Vendor notice |
| CVE-2024-32896Android Pixel Privilege Escalation Vulnerability | Pixel | 2024-06-13 | High (8.1) | No | Vendor notice |
| CVE-2024-29748Android Pixel Privilege Escalation Vulnerability | Pixel | 2024-04-04 | High (7.8) | No | Vendor notice |
| CVE-2024-29745Android Pixel Information Disclosure Vulnerability | Pixel | 2024-04-04 | Medium (5.5) | No | Vendor notice |
| CVE-2023-21237Android Pixel Information Disclosure Vulnerability | Pixel | 2024-03-05 | Medium (6.2) | No | Vendor notice |
| CVE-2023-35674Android Framework Privilege Escalation Vulnerability | Framework | 2023-09-13 | High (8.8) | No | Vendor notice |
| CVE-2023-20963Android Framework Privilege Escalation Vulnerability | Framework | 2023-04-13 | High (7.8) | No | Vendor notice |
| CVE-2011-1823Android OS Privilege Escalation Vulnerability | Android OS | 2022-09-08 | High (7.8) | No | Vendor notice |
| CVE-2021-1048Android Kernel Use-After-Free Vulnerability | Kernel | 2022-05-23 | High (7.8) | No | |
| CVE-2021-0920Android Kernel Race Condition Vulnerability | Kernel | 2022-05-23 | Medium (6.4) | No | |
| CVE-2020-0041Android Kernel Out-of-Bounds Write Vulnerability | Android Kernel | 2021-11-03 | High (7.8) | No | |
| CVE-2019-2215Android Kernel Use-After-Free Vulnerability | Android Kernel | 2021-11-03 | High (7.8) | No |
Source: CISA Known Exploited Vulnerabilities catalog, released 2026-11-04. Severity scores are CVSS where available. "Ransomware" means CISA has marked the flaw as known to be used in ransomware campaigns.