By year
09
11
17
19
20
21
23
24
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Exploited Android flaws
These are on CISA’s Known Exploited Vulnerabilities list, newest first. If you run any of these products, these come before everything else.
- CVE-2025-48595 Android Framework Integer OverflowExploited since Jun 2, 2026 · CVSS 8.4
- CVE-2025-48633 Android Framework Information DisclosureExploited since Dec 2, 2025 · CVSS 5.5
- CVE-2025-48572 Android Framework Privilege EscalationExploited since Dec 2, 2025 · CVSS 7.8
- CVE-2025-48543 Android Runtime Use-After-FreeExploited since Sep 4, 2025 · CVSS 8.8
- CVE-2024-43093 Android Framework Privilege EscalationExploited since Nov 7, 2024 · CVSS 7.3
- CVE-2024-36971 Android Kernel Remote Code ExecutionExploited since Aug 7, 2024 · CVSS 7.8
- CVE-2024-32896 Android Pixel Privilege EscalationExploited since Jun 13, 2024 · CVSS 7.8
- CVE-2024-29745 Android Pixel Information DisclosureExploited since Apr 4, 2024 · CVSS 5.5
- CVE-2024-29748 Android Pixel Privilege EscalationExploited since Apr 4, 2024 · CVSS 7.8
- CVE-2023-21237 Android Pixel Information Disclosure Vulnerability Exploited since Mar 5, 2024 · CVSS 5.5
- CVE-2023-35674 Android Framework Privilege EscalationExploited since Sep 13, 2023 · CVSS 7.8
- CVE-2023-20963 Android Framework Privilege EscalationExploited since Apr 13, 2023 · CVSS 7.8
- CVE-2011-1823 Android OS Privilege EscalationExploited since Sep 8, 2022 · CVSS 7.8
- CVE-2021-0920 Android Kernel Race ConditionExploited since May 23, 2022 · CVSS 6.4
- CVE-2021-1048 Android Kernel Use-After-FreeExploited since May 23, 2022 · CVSS 7.8
- CVE-2020-0041 Android Kernel Out-of-Bounds WriteExploited since Nov 3, 2021 · CVSS 7.8
- CVE-2019-2215 Android Kernel Use-After-FreeExploited since Nov 3, 2021 · CVSS 7.8
Latest high and critical flaws
- CVE-2026-28576 In Contacts Provider, there is a possible way to access the contacts database due to SQL injection.Critical 10 · Jun 17, 2026
- CVE-2025-48595 Android Framework Integer OverflowExploited · High 8.4 · Jun 1, 2026
- CVE-2025-48572 Android Framework Privilege EscalationExploited · High 7.8 · Dec 8, 2025
- CVE-2025-48543 Android Runtime Use-After-FreeExploited · High 8.8 · Sep 4, 2025
- CVE-2024-43093 Android Framework Privilege EscalationExploited · High 7.3 · Nov 13, 2024
- CVE-2024-7014 EvilVideo vulnerability allows sending malicious apps disguised as videos in Telegram for Android application affecting versions 10.14.4 and older.High 7.1 · Jul 23, 2024
- CVE-2024-32896 Android Pixel Privilege EscalationExploited · High 7.8 · Jun 13, 2024
- CVE-2024-36971 Android Kernel Remote Code ExecutionExploited · High 7.8 · Jun 10, 2024
- CVE-2024-29748 Android Pixel Privilege EscalationExploited · High 7.8 · Apr 5, 2024
- CVE-2023-35674 Android Framework Privilege EscalationExploited · High 7.8 · Sep 11, 2023
- CVE-2023-20963 Android Framework Privilege EscalationExploited · High 7.8 · Mar 24, 2023
- CVE-2021-1048 Android Kernel Use-After-FreeExploited · High 7.8 · Dec 15, 2021
- CVE-2020-0041 Android Kernel Out-of-Bounds WriteExploited · High 7.8 · Mar 10, 2020
- CVE-2019-2215 Android Kernel Use-After-FreeExploited · High 7.8 · Oct 11, 2019
- CVE-2019-2102 In the Bluetooth Low Energy (BLE) specification, there is a provided example Long Term Key (LTK).High 8.8 · Jun 7, 2019
- CVE-2019-2099 In nfa_rw_store_ndef_rx_buf of nfa_rw_act.cc, there is a possible out-of-bound write due to a missing bounds check.High 7.8 · Jun 7, 2019
- CVE-2019-2098 In areNotificationsEnabledForPackage of NotificationManagerService.java, there is a possible permissions bypass due to a missing permissions check.High 7.8 · Jun 7, 2019
- CVE-2019-2097 In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to type confusion.Critical 9.8 · Jun 7, 2019
- CVE-2019-2096 In EffectRelease of EffectBundle.cpp, there is a possible memory corruption due to a double free.High 7.8 · Jun 7, 2019
- CVE-2019-2095 In callGenIDChangeListeners and related functions of SkPixelRef.cpp, there is a possible use after free due to a race condition.High 7 · Jun 7, 2019
- CVE-2019-2094 In parseMPEGCCData of NuPlayerCCDecoder.cpp, there is a possible out of bounds write due to missing bounds checks.High 7.8 · Jun 7, 2019
- CVE-2019-2093 In huff_dec_1D of nlc_dec.cpp, there is a possible out of bounds write due to a missing bounds check.High 8.8 · Jun 7, 2019
- CVE-2019-2092 In isSeparateProfileChallengeAllowed of DevicePolicyManagerService.java, there is a possible permissions bypass due to a missing permission check.High 7.8 · Jun 7, 2019
- CVE-2019-2091 In GetPermittedAccessibilityServicesForUser of DevicePolicyManagerService.java, there is a possible permissions bypass due to a missing permission check.High 7.8 · Jun 7, 2019
- CVE-2019-2090 In isPackageDeviceAdminOnAnyUser of PackageManagerService.java, there is a possible permissions bypass due to a missing permissions check.High 7.8 · Jun 7, 2019
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.