CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–6 of 6 records

CVE Vendor Product Added Due Status
CVE-2025-48595 — Android Framework Integer Overflow Vulnerability
Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.
 Android Framework Jun 2, 2026 Jun 5, 2026
CVE-2025-48572 — Android Framework Privilege Escalation Vulnerability
Android Framework contains an unspecified vulnerability that allows for privilege escalation.
 Android Framework Dec 2, 2025 Dec 23, 2025
CVE-2025-48633 — Android Framework Information Disclosure Vulnerability
Android Framework contains an unspecified vulnerability that allows for information disclosure.
 Android Framework Dec 2, 2025 Dec 23, 2025
CVE-2024-43093 — Android Framework Privilege Escalation Vulnerability
Android Framework contains an unspecified vulnerability that allows for privilege escalation.
 Android Framework Nov 7, 2024 Nov 28, 2024
CVE-2023-35674 — Android Framework Privilege Escalation Vulnerability
Android Framework contains an unspecified vulnerability that allows for privilege escalation.
 Android Framework Sep 13, 2023 Oct 4, 2023
CVE-2023-20963 — Android Framework Privilege Escalation Vulnerability
Android Framework contains an unspecified vulnerability that allows for privilege escalation after updating an app to a higher Target SDK with no additional execution privileges needed.
 Android Framework Apr 13, 2023 May 4, 2023