Android: CISA KEV History
Every Android vulnerability in the CISA Known Exploited Vulnerabilities catalog: confirmed in-the-wild exploitation, addition timeline, and ransomware linkage. Rebuilt automatically on every site deploy.
Snapshot: 2026-09-08 · Source: CISA KEV Catalog · Full KEV dashboard
KEV entries
17
Added, last 12 months
3
Ransomware-linked
0
Latest addition
2026-06-02
Android KEV additions per month, last 24 months
Most-listed products: Framework, Pixel, Kernel, Android Kernel, Runtime.
Latest 17 of 17 Android KEV entries
| CVE | Vulnerability | Added | Ransomware |
|---|---|---|---|
| CVE-2025-48595 | Android Framework Integer Overflow Vulnerability | 2026-06-02 | No |
| CVE-2025-48633 | Android Framework Information Disclosure Vulnerability | 2025-12-02 | No |
| CVE-2025-48572 | Android Framework Privilege Escalation Vulnerability | 2025-12-02 | No |
| CVE-2025-48543 | Android Runtime Use-After-Free Vulnerability | 2025-09-04 | No |
| CVE-2024-43093 | Android Framework Privilege Escalation Vulnerability | 2024-11-07 | No |
| CVE-2024-36971 | Android Kernel Remote Code Execution Vulnerability | 2024-08-07 | No |
| CVE-2024-32896 | Android Pixel Privilege Escalation Vulnerability | 2024-06-13 | No |
| CVE-2024-29748 | Android Pixel Privilege Escalation Vulnerability | 2024-04-04 | No |
| CVE-2024-29745 | Android Pixel Information Disclosure Vulnerability | 2024-04-04 | No |
| CVE-2023-21237 | Android Pixel Information Disclosure Vulnerability | 2024-03-05 | No |
| CVE-2023-35674 | Android Framework Privilege Escalation Vulnerability | 2023-09-13 | No |
| CVE-2023-20963 | Android Framework Privilege Escalation Vulnerability | 2023-04-13 | No |
| CVE-2011-1823 | Android OS Privilege Escalation Vulnerability | 2022-09-08 | No |
| CVE-2021-1048 | Android Kernel Use-After-Free Vulnerability | 2022-05-23 | No |
| CVE-2021-0920 | Android Kernel Race Condition Vulnerability | 2022-05-23 | No |
| CVE-2019-2215 | Android Kernel Use-After-Free Vulnerability | 2021-11-03 | No |
| CVE-2020-0041 | Android Kernel Out-of-Bounds Write Vulnerability | 2021-11-03 | No |
CVE links go to our explainer when one exists, otherwise to the NVD record.
Data: official CISA KEV catalog, fetched at build time. Figures may be reused with attribution to East Bay Cyber and CISA. See also the KEV Velocity Dashboard and all tracked vendors.