Android: every exploited CVE on CISA KEV
All 17 Android bugs attackers are confirmed to be using, with attack scores and free detection rules.
Generated by VEDAS. Scores as of 2026-11-01 19:19 UTC. Rebuilt every few hours from cve-scores, CISA KEV and vedas-signatures. How this works and its limits.
17
Android bugs on CISA’s exploited list
1 added in 2026.
0
are linked to ransomware
Every Android vulnerability the US government has confirmed attackers are using, newest first, with each bug’s EPSS (predicted attack chance) and VEDAS (exploit evidence) scores and any free Nuclei or Suricata detection rule. US federal agencies must fix KEV-listed bugs by a deadline; everyone else should treat the list as “patch first”.
| Added | CVE | Product | Bug | EPSS | VEDAS | Detection rule | Ransomware |
|---|---|---|---|---|---|---|---|
| 2026-06-02 | CVE-2025-48595 | Android Framework | Android Framework Integer Overflow Vulnerability | 0.02 | 0.51 | Out of scope (local) | No |
| 2025-12-02 | CVE-2025-48633 | Android Framework | Android Framework Information Disclosure Vulnerability | 0.00 | 0.51 | Out of scope (local) | No |
| 2025-12-02 | CVE-2025-48572 | Android Framework | Android Framework Privilege Escalation Vulnerability | 0.00 | 0.51 | Out of scope (local) | No |
| 2025-09-04 | CVE-2025-48543 | Android Runtime | Android Runtime Use-After-Free Vulnerability | 0.01 | 0.97 | Out of scope (local) | No |
| 2024-11-07 | CVE-2024-43093 | Android Framework | Android Framework Privilege Escalation Vulnerability | 0.01 | 0.74 | Out of scope (local) | No |
| 2024-08-07 | CVE-2024-36971 | Android Kernel | Android Kernel Remote Code Execution Vulnerability | 0.03 | 0.97 | Out of scope (local) | No |
| 2024-06-13 | CVE-2024-32896 | Android Pixel | Android Pixel Privilege Escalation Vulnerability | 0.03 | 0.70 | None yet | No |
| 2024-04-04 | CVE-2024-29748 | Android Pixel | Android Pixel Privilege Escalation Vulnerability | 0.01 | 0.69 | Out of scope (local) | No |
| 2024-04-04 | CVE-2024-29745 | Android Pixel | Android Pixel Information Disclosure Vulnerability | 0.00 | 0.52 | Out of scope (local) | No |
| 2024-03-05 | CVE-2023-21237 | Android Pixel | Android Pixel Information Disclosure Vulnerability | 0.00 | 0.70 | Out of scope (local) | No |
| 2023-09-13 | CVE-2023-35674 | Android Framework | Android Framework Privilege Escalation Vulnerability | 0.03 | 0.97 | Out of scope (local) | No |
| 2023-04-13 | CVE-2023-20963 | Android Framework | Android Framework Privilege Escalation Vulnerability | 0.01 | 0.97 | Out of scope (local) | No |
| 2022-09-08 | CVE-2011-1823 | Android Android OS | Android OS Privilege Escalation Vulnerability | 0.41 | 0.61 | Out of scope (local) | No |
| 2022-05-23 | CVE-2021-1048 | Android Kernel | Android Kernel Use-After-Free Vulnerability | 0.01 | 0.98 | Out of scope (local) | No |
| 2022-05-23 | CVE-2021-0920 | Android Kernel | Android Kernel Race Condition Vulnerability | 0.01 | 0.98 | Out of scope (local) | No |
| 2021-11-03 | CVE-2020-0041 | Android Android Kernel | Android Kernel Out-of-Bounds Write Vulnerability | 0.03 | 0.97 | Out of scope (local) | No |
| 2021-11-03 | CVE-2019-2215 | Android Android Kernel | Android Kernel Use-After-Free Vulnerability | 0.72 | 0.99 | Out of scope (local) | No |
Industry partners
