Vendor
Android
3,760 known vulnerabilities in products by Android, 50 of them actively exploited (CISA KEV).
Key figures
3,760
Vulnerabilities
50
Actively exploited (KEV)
0
Used by ransomware
319
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2023-4863 | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2020-15999 | Google Chrome FreeType Heap Buffer Overflow Vulnerability In CISA KEV | 9.6 | |
| Critical | CVE-2022-0492 | Linux Kernel Improper Authentication Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2025-27363 | FreeType Out-of-Bounds Write Vulnerability In CISA KEV | 8.1 | |
| Critical | CVE-2021-22555 | Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE In CISA KEV | 8.3 | |
| Critical | CVE-2022-38181 | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2025-39682 | Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2023-2136 | Google Chrome Skia Integer Overflow Vulnerability In CISA KEV | 9.6 | |
| Critical | CVE-2022-0847 | Linux Kernel Privilege Escalation Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2022-0185 | Linux Kernel Heap-Based Buffer Overflow Vulnerability In CISA KEV | 8.4 | |
| Critical | CVE-2021-28663 | Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2021-28664 | Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2024-53197 | Linux Kernel Out-of-Bounds Access Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2022-0995 | Linux Kernel Out-of-Bounds Write Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2024-53104 | Linux Kernel Out-of-Bounds Write Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2025-48595 | Android Framework Integer Overflow Vulnerability In CISA KEV | 8.4 | |
| Critical | CVE-2023-0266 | Linux Kernel Use-After-Free Vulnerability In CISA KEV | 7.9 | |
| Critical | CVE-2024-32896 | Android Pixel Privilege Escalation Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2021-29256 | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2021-22600 | Double Free in net/packet/af_packet.c leading to priviledge escalation In CISA KEV | 6.6 | |
| Critical | CVE-2024-36971 | Android Kernel Remote Code Execution Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2023-35674 | Android Framework Privilege Escalation Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2026-21385 | Integer Overflow or Wraparound in Graphics In CISA KEV | 7.8 | |
| Critical | CVE-2026-58704 | Google Pixel Improper Authorization Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2025-38352 | Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability In CISA KEV | 7.8 |
News
- 58 hardware vulnerabilities: A guide to the threatscsoonline,
- CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wildthehackernews,
- Pixel Modem Zero-Day Exploited in Targeted Attackssecurityweek,
- Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitationthehackernews,
- CISA Adds 10 CVEs to Known Exploited Vulnerabilities Catalog, Five with Three-day Mitigation Deadlinessans-newsbites-mail,
- 16-year-old KVM flaw allows attackers to escape VMs and take over Linux serverscsoonline,