Sysprobs Sysprobs

CISA KEV by vendor

Android vulnerabilities in the CISA KEV catalogue

17 Android entries in CISA's Known Exploited Vulnerabilities catalogue, 0 of them (0 percent) known to have been used in ransomware campaigns. First added 3 November 2021, latest 2 June 2026.

Last updated MethodologyDownload all entries (CSV)

By . Published by Sysprobs.

Dinesh has worked in IT for about 20 years across virtualisation, networking and Microsoft platforms. He runs Sysprobs.

Data status: a source is stale

Last synced CISA catalogue version 2026.11.04 (released 4 November 2026) 1,768 entries Updated manually

17entries, 1.0% of the catalogue
0known ransomware use
0added in the last 7 days
0federal due dates in the next 14 days

Products

Android products in the catalogue, by number of entries
Product, as CISA names itEntries
Framework6
Pixel4
Kernel3
Android Kernel2
Runtime1
Android OS1

Latest additions

The 10 most recent Android entries
CVEProductAddedDueRansomwareCVSSEPSSSSVCExposed asset window
CVE-2025-48595Framework2026-06-022026-06-05Unknown8.4 High1.9%Not auto, total3 days + triage
CVE-2025-48633Framework2025-12-022025-12-23Unknown5.5 Medium0.2%Not auto, partial14 days
CVE-2025-48572Framework2025-12-022025-12-23Unknown7.8 High0.2%Not auto, total3 days + triage
CVE-2025-48543Runtime2025-09-042025-09-25Unknown8.8 High0.6%Not auto, total3 days + triage
CVE-2024-43093Framework2024-11-072024-11-28Unknown7.3 High0.7%Not auto, total3 days + triage
CVE-2024-36971Kernel2024-08-072024-08-28Unknown7.8 High2.7%Not auto, total3 days + triage
CVE-2024-32896Pixel2024-06-132024-07-04Unknown7.8 High2.9%Not auto, total3 days + triage
CVE-2024-29748Pixel2024-04-042024-04-25Unknown7.8 High0.6%Not auto, total3 days + triage
CVE-2024-29745Pixel2024-04-042024-04-25Unknown5.5 Medium0.4%Not auto, partial14 days
CVE-2023-21237Pixel2024-03-052024-03-26Unknown5.5 Medium0.2%Not auto, partial14 days

All 17 entries

Every Android entry, newest first
CVEProductAddedDueRansomwareCVSSEPSSSSVCExposed asset window
CVE-2025-48595Framework2026-06-022026-06-05Unknown8.4 High1.9%Not auto, total3 days + triage
CVE-2025-48633Framework2025-12-022025-12-23Unknown5.5 Medium0.2%Not auto, partial14 days
CVE-2025-48572Framework2025-12-022025-12-23Unknown7.8 High0.2%Not auto, total3 days + triage
CVE-2025-48543Runtime2025-09-042025-09-25Unknown8.8 High0.6%Not auto, total3 days + triage
CVE-2024-43093Framework2024-11-072024-11-28Unknown7.3 High0.7%Not auto, total3 days + triage
CVE-2024-36971Kernel2024-08-072024-08-28Unknown7.8 High2.7%Not auto, total3 days + triage
CVE-2024-32896Pixel2024-06-132024-07-04Unknown7.8 High2.9%Not auto, total3 days + triage
CVE-2024-29748Pixel2024-04-042024-04-25Unknown7.8 High0.6%Not auto, total3 days + triage
CVE-2024-29745Pixel2024-04-042024-04-25Unknown5.5 Medium0.4%Not auto, partial14 days
CVE-2023-21237Pixel2024-03-052024-03-26Unknown5.5 Medium0.2%Not auto, partial14 days
CVE-2023-35674Framework2023-09-132023-10-04Unknown7.8 High2.6%Not auto, total3 days + triage
CVE-2023-20963Framework2023-04-132023-05-04Unknown7.8 High1.4%Not auto, total3 days + triage
CVE-2011-1823Android OS2022-09-082022-09-29Unknown7.8 High41.3%Not auto, total3 days + triage
CVE-2021-1048Kernel2022-05-232022-06-13Unknown7.8 High1.0%Not auto, total3 days + triage
CVE-2021-0920Kernel2022-05-232022-06-13Unknown6.4 Medium0.8%Not auto, total3 days + triage
CVE-2020-0041Android Kernel2021-11-032022-05-03Unknown7.8 High3.1%Not auto, total3 days + triage
CVE-2019-2215Android Kernel2021-11-032022-05-03Unknown7.8 High72.1%Not auto, total3 days + triage

Due dates bind US federal civilian executive branch agencies only (BOD 26-04). Filter Android in the tracker by date, score or status.

Source: CISA Known Exploited Vulnerabilities Catalog; NVD, FIRST EPSS and CISA SSVC for the scores. This product uses data from the NVD API but is not endorsed or certified by the NVD. CISA does not endorse Sysprobs.