How we count
Every figure on this page is a direct count of entries in CISA’s Known Exploited Vulnerabilities catalog attributed by CISA to Android (KEV field vendorProject), refreshed daily. “Ransomware-linked” counts entries CISA marks as known to be used in ransomware campaigns; the remainder are “unknown” to CISA, not confirmed ransomware-free. A KEV listing means the vulnerability has been observed exploited in the wild. Snapshot as of 2026-08-31.
Exploited Android vulnerabilities (CISA KEV)
| CVE | Product | Vulnerability | Added | |
|---|---|---|---|---|
| CVE-2025-48595 | Framework | Android Framework Integer Overflow Vulnerability | 2026-06-02 | |
| CVE-2025-48633 | Framework | Android Framework Information Disclosure Vulnerability | 2025-12-02 | |
| CVE-2025-48572 | Framework | Android Framework Privilege Escalation Vulnerability | 2025-12-02 | |
| CVE-2025-48543 | Runtime | Android Runtime Use-After-Free Vulnerability | 2025-09-04 | |
| CVE-2024-43093 | Framework | Android Framework Privilege Escalation Vulnerability | 2024-11-07 | |
| CVE-2024-36971 | Kernel | Android Kernel Remote Code Execution Vulnerability | 2024-08-07 | |
| CVE-2024-32896 | Pixel | Android Pixel Privilege Escalation Vulnerability | 2024-06-13 | |
| CVE-2024-29748 | Pixel | Android Pixel Privilege Escalation Vulnerability | 2024-04-04 | |
| CVE-2024-29745 | Pixel | Android Pixel Information Disclosure Vulnerability | 2024-04-04 | |
| CVE-2023-21237 | Pixel | Android Pixel Information Disclosure Vulnerability | 2024-03-05 | |
| CVE-2023-35674 | Framework | Android Framework Privilege Escalation Vulnerability | 2023-09-13 | |
| CVE-2023-20963 | Framework | Android Framework Privilege Escalation Vulnerability | 2023-04-13 | |
| CVE-2011-1823 | Android OS | Android OS Privilege Escalation Vulnerability | 2022-09-08 | |
| CVE-2021-1048 | Kernel | Android Kernel Use-After-Free Vulnerability | 2022-05-23 | |
| CVE-2021-0920 | Kernel | Android Kernel Race Condition Vulnerability | 2022-05-23 | |
| CVE-2019-2215 | Android Kernel | Android Kernel Use-After-Free Vulnerability | 2021-11-03 | |
| CVE-2020-0041 | Android Kernel | Android Kernel Out-of-Bounds Write Vulnerability | 2021-11-03 |
← All vendors by exploited-vulnerability count
🤖 Generated by defend.network from the CISA KEV catalog. Counts are deterministic aggregates of official CISA data; verify individual advisories at the linked sources.