Skip to content
Sign in

Google product

Android

Alert
No Android CVE is in the CISA KEV catalogue.

Tracked since 22 Jan · latest article 9 Oct · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 0 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

0Articles · 7 days

none this week

Exploited, by due date

No Android CVE is in the CISA KEV catalogue.

Patch cadence and exploit odds

How often CISA adds Android CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

CISA has not added a Android CVE to KEV.

Fix listed

6 of 16 CVEs in coverage

10 CVEs have no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2026-58704: 49.9th percentile, in CISA KEVCVE-2026-0006: 50.6th percentileCVE-2026-0073: 45.4th percentileCVE-2026-28666: 27th percentileCVE-2024-27227: 25th percentileCVE-2026-55318: 21.7th percentileCVE-2026-28604: 17.5th percentileCVE-2026-56967: 5.9th percentileCVE-2026-28662: 5.9th percentileCVE-2026-0047: 2.7th percentileCVE-2026-0059: 1.5th percentileCVE-2026-0049: 0.9th percentileCVE-2026-49881: 0.9th percentileCVE-2026-0075: 0.9th percentileCVE-2025-36934: 0.8th percentileCVE-2025-48651: 0.7th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2026-000650.6
CVE-2026-5870449.9
CVE-2026-007345.4
CVE-2026-2866627
CVE-2024-2722725
CVE-2026-5531821.7
CVE-2026-2860417.5
CVE-2026-569675.9
CVE-2026-286625.9
CVE-2026-00472.7
CVE-2026-00591.5
CVE-2026-00490.9
CVE-2026-498810.9
CVE-2026-00750.9
CVE-2025-369340.8
CVE-2025-486510.7

Coverage23 articles · all time

The latest 23 articles naming Android, in the shared story grammar.

Full timeline
Quiet for 3 weekslast report 9 Oct23 articles7 outlets

23 articles from 7 outlets since 22 Jan. Quiet since 9 Oct.

Now22 Jan2162162162162162162162First reportThe Hacker News · 22 Jan, 15:36CISA alert16 Sep, 14:01 · official
  • Thu 22 Jan, 15:36 UTC. The Hacker News, first report. ThreatsDay Bulletin: Pixel Zero-Click, Redis RCE, China C2s, RAT Ads, Crypto Scams & 15+ Stories.
  • Tue 3 Mar, 09:01 UTC. The Hacker News. Google patches CVE-2026-21385 in Qualcomm Android graphics. Cites a CVE in CISA KEV.
  • Tue 3 Mar, 11:02 UTC. Security Affairs, its first report on the story. CVE-2026-21385 exploited in Qualcomm graphics on Android devices. Cites a CVE in CISA KEV.
  • Tue 3 Mar, 20:48 UTC. Dark Reading, its first report on the story. Qualcomm graphics CVE-2026-21385 memory flaw targeted Android. Cites a CVE in CISA KEV.
  • Tue 7 Apr, 14:48 UTC. SecurityWeek, its first report on the story. Android patches critical DoS flaw and StrongBox keystore vulnerability.
  • Tue 14 Apr, 14:31 UTC. The Hacker News. Google integrates Rust DNS parser into Pixel 10 modem firmware.
  • Tue 5 May, 12:21 UTC. SecurityWeek. Security team patches critical Android RCE bug CVE-2026-0073.
  • Tue 2 Jun, 14:41 UTC. SecurityWeek. Google patches Android zero day CVE‑2025‑48595 among 124 fixes. Cites a CVE in CISA KEV.
  • Sun 26 Jul, 07:57 UTC. SecurityOnline, its first report on the story. Google plans to block local ADB connections to fix CVE-2026-0073.
  • Wed 19 Aug, 14:00 UTC. SecurityOnline. Google patches Android ContactsProvider2 SQLi high severity bug. Cites a CVE in CISA KEV.
  • Wed 9 Sep, 10:01 UTC. SecurityOnline. Google Fixes Critical Android Flaws Enabling Remote Code Execution.
  • Wed 9 Sep, 17:06 UTC. SecurityWeek. Google Patches 180 Android Flaws, Including Critical Wi-Fi RCE.
  • Thu 10 Sep, 03:31 UTC. SecurityOnline. Android 17 Exploit Chain Gives Untrusted Apps Kernel Control.
  • Thu 10 Sep, 19:11 UTC. The Hacker News. Android Update Fixes Critical Wi-Fi Flaw Amid Rising Attack Risks.
  • Wed 16 Sep, 07:57 UTC. SecurityOnline. Google Patches Pixel Modem Flaw Exploited in Targeted Attacks. Cites a CVE in CISA KEV.
  • Wed 16 Sep, 11:22 UTC. Malwarebytes, its first report on the story. Google Patches Pixel Modem Flaw Exploited in Targeted Attacks. Cites a CVE in CISA KEV.
  • Wed 16 Sep, 13:40 UTC. SecurityWeek. Google Patches Pixel Zero Day Exploited in Targeted Attacks. Cites a CVE in CISA KEV.
  • Wed 16 Sep, 14:01 UTC. CISA, its first report on the story. Actively Exploited Pixel Modem Flaw Bypasses Permission Checks. Cites a CVE in CISA KEV.
  • Wed 16 Sep, 14:16 UTC. Security Affairs. Google Fixes Exploited Pixel Modem Flaw in September Update. Cites a CVE in CISA KEV.
  • Wed 16 Sep, 16:01 UTC. CISA. CISA Warns of Active Exploitation in Google Pixel Vulnerability. Cites a CVE in CISA KEV.
  • Thu 17 Sep, 10:42 UTC. Security Affairs. CISA Flags Actively Exploited Cisco, Acronis and Pixel Flaws. Cites a CVE in CISA KEV.
  • Tue 22 Sep, 01:30 UTC. SecurityOnline. Android Telecom Flaw Lets Apps Execute Code in the System Server.
  • Fri 9 Oct, 10:20 UTC. The Hacker News. Hackers Earn $562,500 for Three Remote Exploits on Pixel 10. Cites a CVE in CISA KEV.
  • Known exploited CVE
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Square: official source
  • Coverage over time
Show all 23 articles as a list
  1. Thu 22 JanDay 01
    1. ThreatsDay Bulletin: Pixel Zero-Click, Redis RCE, China C2s, RAT Ads, Crypto Scams & 15+ Stories15:36 · The Hacker News · First report

  2. Quiet for 6 weeks

    Tue 3 MarDay 403
    1. Google patches CVE-2026-21385 in Qualcomm Android graphics09:01 · The Hacker News · Exploited CVE · Picked up again · Known exploited CVE
    2. CVE-2026-21385 exploited in Qualcomm graphics on Android devices11:02 · Security Affairs · Known exploited CVE
    3. Qualcomm graphics CVE-2026-21385 memory flaw targeted Android20:48 · Dark Reading · Known exploited CVE

  3. Quiet for 5 weeks

    Tue 7 AprDay 751
    1. Android patches critical DoS flaw and StrongBox keystore vulnerability14:48 · SecurityWeek · Picked up again

  4. Quiet for 7 days

    Tue 14 AprDay 821
    1. Google integrates Rust DNS parser into Pixel 10 modem firmware14:31 · The Hacker News · Picked up again

  5. Quiet for 3 weeks

    Tue 5 MayDay 1031
    1. Security team patches critical Android RCE bug CVE-2026-007312:21 · SecurityWeek · Picked up again

  6. Quiet for 4 weeks

    Tue 2 JunDay 1311
    1. Google patches Android zero day CVE‑2025‑48595 among 124 fixes14:41 · SecurityWeek · Picked up again · Known exploited CVE

  7. Quiet for 8 weeks

    Sun 26 JulDay 1851
    1. Google plans to block local ADB connections to fix CVE-2026-007307:57 · SecurityOnline · Picked up again

  8. Quiet for 3 weeks

    Wed 19 AugDay 2091
    1. Google patches Android ContactsProvider2 SQLi high severity bug14:00 · SecurityOnline · Picked up again · Known exploited CVE

  9. Quiet for 3 weeks

    Wed 9 SepDay 2302
    1. Google Fixes Critical Android Flaws Enabling Remote Code Execution10:01 · SecurityOnline · Picked up again
    2. Google Patches 180 Android Flaws, Including Critical Wi-Fi RCE17:06 · SecurityWeek
  10. Thu 10 SepDay 2312
    1. Android 17 Exploit Chain Gives Untrusted Apps Kernel Control03:31 · SecurityOnline
    2. Android Update Fixes Critical Wi-Fi Flaw Amid Rising Attack Risks19:11 · The Hacker News

  11. Quiet for 6 days

    Wed 16 SepDay 2376
    1. Google Patches Pixel Modem Flaw Exploited in Targeted Attacks07:57 · SecurityOnline · Picked up again · Known exploited CVE
    2. Google Patches Pixel Modem Flaw Exploited in Targeted Attacks11:22 · Malwarebytes · Known exploited CVE
    3. Actively Exploited Pixel Modem Flaw Bypasses Permission Checks14:01 · CISA · official · CISA alert · Known exploited CVE
    Show 3 more from 16 Sep
    1. Google Patches Pixel Zero Day Exploited in Targeted Attacks13:40 · SecurityWeek · Known exploited CVE
    2. Google Fixes Exploited Pixel Modem Flaw in September Update14:16 · Security Affairs · Known exploited CVE
    3. CISA Warns of Active Exploitation in Google Pixel Vulnerability16:01 · CISA · official · Known exploited CVE
  12. Thu 17 SepDay 2381
    1. CISA Flags Actively Exploited Cisco, Acronis and Pixel Flaws10:42 · Security Affairs · Known exploited CVE

  13. Quiet for 5 days

    Tue 22 SepDay 2431
    1. Android Telecom Flaw Lets Apps Execute Code in the System Server01:30 · SecurityOnline · Picked up again

  14. Quiet for 2 weeks

    Fri 9 OctDay 2601
    1. Hackers Earn $562,500 for Three Remote Exploits on Pixel 1010:20 · The Hacker News · Picked up again · Known exploited CVE

All CVEs in coverage16

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2026-58704Exploited

    Google Pixel Improper Authorization Vulnerability

    8.0High0.6% EPSS · 8 articles
  • CVE-2026-0006

    Google Android vulnerability

    Not scored0.6% EPSS · 2 articles
  • CVE-2026-0073

    Google Android vulnerability

    8.8High0.5% EPSS · 2 articles
  • CVE-2026-28666

    Google Android vulnerability

    Not scored0.3% EPSS · 1 article
  • CVE-2024-27227

    Google Android vulnerability

    9.8Critical0.3% EPSS · 1 article
  • CVE-2026-55318

    Google Android vulnerability

    8.8High0.3% EPSS · 1 article
  • CVE-2026-28604

    Google Android vulnerability

    Not scored0.3% EPSS · 1 article
  • CVE-2026-56967

    Google Android vulnerability

    8.0High0.2% EPSS · 1 article
  • CVE-2026-28662

    Google Android vulnerability

    Not scored0.2% EPSS · 2 articles
  • CVE-2026-0047

    Google Android vulnerability

    Not scored0.1% EPSS · 1 article
  • CVE-2026-0059

    Google Android vulnerability

    8.0High0.1% EPSS · 1 article
  • CVE-2026-0049

    Google Android vulnerability

    6.2Medium0.1% EPSS · 1 article
Show 4 more CVEs
  • CVE-2026-49881

    Google Android vulnerability

    Not scored0.1% EPSS · 2 articles
  • CVE-2026-0075

    Google Android vulnerability

    7.8High0.1% EPSS · 1 article
  • CVE-2025-36934

    Google Android vulnerability

    Not scored0.1% EPSS · 1 article
  • CVE-2025-48651

    Google Android vulnerability

    4.0Medium0.1% EPSS · 1 article
CyberSIXTSignal over noise
Updated AboutDevelopersSign in