Android
CVEs currently on EVULNABLE's Priority Feed for Android, and this vendor's own CISA KEV history.
CISA KEV additions over time
Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.
20 Apr – 12 Oct; busiest week: 1 added.
- Not ransomware-linked
- Ransomware-linked
- This week (so far)
| Week of | Added to KEV | Ransomware-linked |
|---|---|---|
| 2026-04-20 | 0 | 0 |
| 2026-04-27 | 0 | 0 |
| 2026-05-04 | 0 | 0 |
| 2026-05-11 | 0 | 0 |
| 2026-05-18 | 0 | 0 |
| 2026-05-25 | 0 | 0 |
| 2026-06-01 | 1 | 0 |
| 2026-06-08 | 0 | 0 |
| 2026-06-15 | 0 | 0 |
| 2026-06-22 | 0 | 0 |
| 2026-06-29 | 0 | 0 |
| 2026-07-06 | 0 | 0 |
| 2026-07-13 | 0 | 0 |
| 2026-07-20 | 0 | 0 |
| 2026-07-27 | 0 | 0 |
| 2026-08-03 | 0 | 0 |
| 2026-08-10 | 0 | 0 |
| 2026-08-17 | 0 | 0 |
| 2026-08-24 | 0 | 0 |
| 2026-08-31 | 0 | 0 |
| 2026-09-07 | 0 | 0 |
| 2026-09-14 | 0 | 0 |
| 2026-09-21 | 0 | 0 |
| 2026-09-28 | 0 | 0 |
| 2026-10-05 | 0 | 0 |
| 2026-10-12 (so far) | 0 | 0 |
In EVULNABLE's ranked feed
Showing all 17 Android CVEs in EVULNABLE's ranked feed.
#1 77 Urgent CVE-2019-2215 KEV since 2021 · listed over a yearCISA KEV Android — Android Kernel Use-After-Free Vulnerability KEV, EPSS 72.1%
EVRS 77/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.721.
#2 75 Urgent CVE-2011-1823 KEV since 2022 · listed over a yearCISA KEV Android — Android OS Privilege Escalation Vulnerability KEV, EPSS 41.4%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.414.
#3 75 Urgent CVE-2020-0041 KEV since 2021 · listed over a yearCISA KEV Android — Android Kernel Out-of-Bounds Write Vulnerability KEV, EPSS 3.1%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.031.
#4 75 Urgent CVE-2024-32896 KEV since 2024 · listed over a yearCISA KEV Android — Android Pixel Privilege Escalation Vulnerability KEV, EPSS 3.0%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.030.
#5 75 Urgent CVE-2024-36971 KEV since 2024 · listed over a yearCISA KEV Android — Android Kernel Remote Code Execution Vulnerability KEV, EPSS 2.7%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.027.
#6 75 Urgent CVE-2023-35674 KEV since 2023 · listed over a yearCISA KEV Android — Android Framework Privilege Escalation Vulnerability KEV, EPSS 2.6%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.026.
#7 75 Urgent CVE-2025-48595 CISA federal deadline · Overdue by 4 monthsCISA KEV Android — Android Framework Integer Overflow Vulnerability KEV, EPSS 1.7%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.017.
#8 75 Urgent CVE-2023-20963 KEV since 2023 · listed over a yearCISA KEV Android — Android Framework Privilege Escalation Vulnerability KEV, EPSS 1.5%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.015.
#9 75 Urgent CVE-2021-1048 KEV since 2022 · listed over a yearCISA KEV Android — Android Kernel Use-After-Free Vulnerability KEV, EPSS 1.1%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.011.
#10 75 Urgent CVE-2021-0920 KEV since 2022 · listed over a yearCISA KEV Android — Android Kernel Race Condition Vulnerability KEV, EPSS 0.9%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.009.
#11 75 Urgent CVE-2024-43093 KEV since 2024 · listed over a yearCISA KEV Android — Android Framework Privilege Escalation Vulnerability KEV, EPSS 0.7%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.007.
#12 75 Urgent CVE-2024-29748 KEV since 2024 · listed over a yearCISA KEV Android — Android Pixel Privilege Escalation Vulnerability KEV, EPSS 0.7%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.007.
#13 75 Urgent CVE-2025-48543 KEV since 2025 · listed over a yearCISA KEV Android — Android Runtime Use-After-Free Vulnerability KEV, EPSS 0.6%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.006.
#14 75 Urgent CVE-2024-29745 KEV since 2024 · listed over a yearCISA KEV Android — Android Pixel Information Disclosure Vulnerability KEV, EPSS 0.5%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.005.
#15 75 Urgent CVE-2023-21237 KEV since 2024 · listed over a yearCISA KEV Android — Android Pixel Information Disclosure Vulnerability KEV, EPSS 0.3%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.003.
#16 75 Urgent CVE-2025-48633 CISA federal deadline · Overdue by 10 monthsCISA KEV Android — Android Framework Information Disclosure Vulnerability KEV, EPSS 0.3%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.003.
#17 75 Urgent CVE-2025-48572 CISA federal deadline · Overdue by 10 monthsCISA KEV Android — Android Framework Privilege Escalation Vulnerability KEV, EPSS 0.3%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.003.
