CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–10 of 17 records

CVE Vendor Product Added Due Status
CVE-2025-48595 — Android Framework Integer Overflow Vulnerability
Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.
 Android Framework Jun 2, 2026 Jun 5, 2026
CVE-2025-48572 — Android Framework Privilege Escalation Vulnerability
Android Framework contains an unspecified vulnerability that allows for privilege escalation.
 Android Framework Dec 2, 2025 Dec 23, 2025
CVE-2025-48633 — Android Framework Information Disclosure Vulnerability
Android Framework contains an unspecified vulnerability that allows for information disclosure.
 Android Framework Dec 2, 2025 Dec 23, 2025
CVE-2025-48543 — Android Runtime Use-After-Free Vulnerability
Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation.
 Android Runtime Sep 4, 2025 Sep 25, 2025
CVE-2024-43093 — Android Framework Privilege Escalation Vulnerability
Android Framework contains an unspecified vulnerability that allows for privilege escalation.
 Android Framework Nov 7, 2024 Nov 28, 2024
CVE-2024-36971 — Android Kernel Remote Code Execution Vulnerability
Android contains an unspecified vulnerability in the kernel that allows for remote code execution. This vulnerability resides in Linux Kernel and could impact other products, including but not limited to Android OS.
 Android Kernel Aug 7, 2024 Aug 28, 2024
CVE-2024-32896 — Android Pixel Privilege Escalation Vulnerability
Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation.
 Android Pixel Jun 13, 2024 Jul 4, 2024
CVE-2024-29745 — Android Pixel Information Disclosure Vulnerability
Android Pixel contains an information disclosure vulnerability in the fastboot firmware used to support unlocking, flashing, and locking affected devices.
 Android Pixel Apr 4, 2024 Apr 25, 2024
CVE-2024-29748 — Android Pixel Privilege Escalation Vulnerability
Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin app.
 Android Pixel Apr 4, 2024 Apr 25, 2024
CVE-2023-21237 — Android Pixel Information Disclosure Vulnerability
Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information.
 Android Pixel Mar 5, 2024 Mar 26, 2024