Skip to main content
EVULNABLE
Home

Android

CVEs currently on EVULNABLE's Priority Feed for Android, and this vendor's own CISA KEV history.

CISA KEV additions over time

Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.

20 Apr – 12 Oct; busiest week: 1 added.

Week of 2026-04-20: 0 added to KEV Week of 2026-04-27: 0 added to KEV Week of 2026-05-04: 0 added to KEV Week of 2026-05-11: 0 added to KEV Week of 2026-05-18: 0 added to KEV Week of 2026-05-25: 0 added to KEV Week of 2026-06-01: 1 added to KEV Week of 2026-06-08: 0 added to KEV Week of 2026-06-15: 0 added to KEV Week of 2026-06-22: 0 added to KEV Week of 2026-06-29: 0 added to KEV Week of 2026-07-06: 0 added to KEV Week of 2026-07-13: 0 added to KEV Week of 2026-07-20: 0 added to KEV Week of 2026-07-27: 0 added to KEV Week of 2026-08-03: 0 added to KEV Week of 2026-08-10: 0 added to KEV Week of 2026-08-17: 0 added to KEV Week of 2026-08-24: 0 added to KEV Week of 2026-08-31: 0 added to KEV Week of 2026-09-07: 0 added to KEV Week of 2026-09-14: 0 added to KEV Week of 2026-09-21: 0 added to KEV Week of 2026-09-28: 0 added to KEV Week of 2026-10-05: 0 added to KEV Week of 2026-10-12 (so far): 0 added to KEV
1
0
May
Jun
Jul
Aug
Sep
Oct
  • Not ransomware-linked
  • Ransomware-linked
  • This week (so far)
CISA KEV additions per week, last 26 weeks
Week ofAdded to KEVRansomware-linked
2026-04-2000
2026-04-2700
2026-05-0400
2026-05-1100
2026-05-1800
2026-05-2500
2026-06-0110
2026-06-0800
2026-06-1500
2026-06-2200
2026-06-2900
2026-07-0600
2026-07-1300
2026-07-2000
2026-07-2700
2026-08-0300
2026-08-1000
2026-08-1700
2026-08-2400
2026-08-3100
2026-09-0700
2026-09-1400
2026-09-2100
2026-09-2800
2026-10-0500
2026-10-12 (so far)00

In EVULNABLE's ranked feed

Showing all 17 Android CVEs in EVULNABLE's ranked feed.

#1 77 Urgent CVE-2019-2215 KEV since 2021 · listed over a yearCISA KEV Android — Android Kernel Use-After-Free Vulnerability KEV, EPSS 72.1%

EVRS 77/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS72.1% · 99.43rd pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.721.

#2 75 Urgent CVE-2011-1823 KEV since 2022 · listed over a yearCISA KEV Android — Android OS Privilege Escalation Vulnerability KEV, EPSS 41.4%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS41.4% · 98.7th pctlKEV since2022-09-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.414.

#3 75 Urgent CVE-2020-0041 KEV since 2021 · listed over a yearCISA KEV Android — Android Kernel Out-of-Bounds Write Vulnerability KEV, EPSS 3.1%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS3.1% · 87.7th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.031.

#4 75 Urgent CVE-2024-32896 KEV since 2024 · listed over a yearCISA KEV Android — Android Pixel Privilege Escalation Vulnerability KEV, EPSS 3.0%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS3.0% · 87.1st pctlKEV since2024-06-13

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.030.

#5 75 Urgent CVE-2024-36971 KEV since 2024 · listed over a yearCISA KEV Android — Android Kernel Remote Code Execution Vulnerability KEV, EPSS 2.7%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS2.7% · 85.7th pctlKEV since2024-08-07

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.027.

#6 75 Urgent CVE-2023-35674 KEV since 2023 · listed over a yearCISA KEV Android — Android Framework Privilege Escalation Vulnerability KEV, EPSS 2.6%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS2.6% · 85.2nd pctlKEV since2023-09-13

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.026.

#7 75 Urgent CVE-2025-48595 CISA federal deadline · Overdue by 4 monthsCISA KEV Android — Android Framework Integer Overflow Vulnerability KEV, EPSS 1.7%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.4 (NVD)EPSS1.7% · 77th pctlKEV since2026-06-02

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.017.

#8 75 Urgent CVE-2023-20963 KEV since 2023 · listed over a yearCISA KEV Android — Android Framework Privilege Escalation Vulnerability KEV, EPSS 1.5%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS1.5% · 73.2nd pctlKEV since2023-04-13

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.015.

#9 75 Urgent CVE-2021-1048 KEV since 2022 · listed over a yearCISA KEV Android — Android Kernel Use-After-Free Vulnerability KEV, EPSS 1.1%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS1.1% · 63.9th pctlKEV since2022-05-23

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.011.

#10 75 Urgent CVE-2021-0920 KEV since 2022 · listed over a yearCISA KEV Android — Android Kernel Race Condition Vulnerability KEV, EPSS 0.9%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.4 (NVD)EPSS0.9% · 58th pctlKEV since2022-05-23

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.009.

#11 75 Urgent CVE-2024-43093 KEV since 2024 · listed over a yearCISA KEV Android — Android Framework Privilege Escalation Vulnerability KEV, EPSS 0.7%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.3 (NVD)EPSS0.7% · 52.6th pctlKEV since2024-11-07

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.007.

#12 75 Urgent CVE-2024-29748 KEV since 2024 · listed over a yearCISA KEV Android — Android Pixel Privilege Escalation Vulnerability KEV, EPSS 0.7%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS0.7% · 51.3rd pctlKEV since2024-04-04

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.007.

#13 75 Urgent CVE-2025-48543 KEV since 2025 · listed over a yearCISA KEV Android — Android Runtime Use-After-Free Vulnerability KEV, EPSS 0.6%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS0.6% · 49.3rd pctlKEV since2025-09-04

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.006.

#14 75 Urgent CVE-2024-29745 KEV since 2024 · listed over a yearCISA KEV Android — Android Pixel Information Disclosure Vulnerability KEV, EPSS 0.5%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS5.5 (NVD)EPSS0.5% · 40.5th pctlKEV since2024-04-04

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.005.

#15 75 Urgent CVE-2023-21237 KEV since 2024 · listed over a yearCISA KEV Android — Android Pixel Information Disclosure Vulnerability KEV, EPSS 0.3%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS5.5 (NVD)EPSS0.3% · 17.2nd pctlKEV since2024-03-05

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.003.

#16 75 Urgent CVE-2025-48633 CISA federal deadline · Overdue by 10 monthsCISA KEV Android — Android Framework Information Disclosure Vulnerability KEV, EPSS 0.3%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS5.5 (NVD)EPSS0.3% · 16.8th pctlKEV since2025-12-02

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.003.

#17 75 Urgent CVE-2025-48572 CISA federal deadline · Overdue by 10 monthsCISA KEV Android — Android Framework Privilege Escalation Vulnerability KEV, EPSS 0.3%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS0.3% · 16.4th pctlKEV since2025-12-02

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.003.