Android Framework

Name: Android Framework
Brand: Android

productNL

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical9high1medium0low

updated 2026-10-27

vulnerabilities (46)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-27363US	high8.1OT critical	27.8% (98th)	KEV	no fix	2025-03-11	≤ vers:android/12
CVE-2025-0087US	—	0.22% (12th)	Exploit	no fix	2025-09-04	≤ vers:android/12
CVE-2024-34739US	high7.8	0.19% (8th)	Exploit	no fix	2024-08-15	≤ vers:android/12
CVE-2025-20666US	high7.5	0.83% (57th)	—	no fix	2025-05-05	≤ vers:android/12
CVE-2025-0072US	high7.8	0.40% (34th)	—	no fix	2025-05-02	≤ vers:android/12
CVE-2025-26438US	—	0.34% (28th)	—	no fix	2025-09-04	≤ vers:android/12
CVE-2025-21459US	—	0.34% (28th)	—	no fix	2025-05-06	≤ vers:android/12
CVE-2024-49846US	critical9.1	0.29% (21st)	—	no fix	2025-05-06	≤ vers:android/12
CVE-2024-49847US	—	0.26% (17th)	—	no fix	2025-05-06	≤ vers:android/12
CVE-2024-52939US	—	0.18% (7th)	—	no fix	2025-02-22	≤ vers:android/12
CVE-2025-0427US	high7.8	0.17% (7th)	—	no fix	2025-05-02	≤ vers:android/12
CVE-2024-12577US	—	0.17% (7th)	—	no fix	2025-02-22	≤ vers:android/12
CVE-2024-47900US	—	0.17% (6th)	—	no fix	2025-01-31	≤ vers:android/12
CVE-2024-47891US	—	0.17% (6th)	—	no fix	2025-01-31	≤ vers:android/12
CVE-2024-47896US	—	0.16% (5th)	—	no fix	2025-02-22	≤ vers:android/12
CVE-2024-46974US	—	0.16% (5th)	—	no fix	2025-01-31	≤ vers:android/12
CVE-2023-21342US	high7.8	0.15% (4th)	—	no fix	2023-10-30	≤ vers:android/12
CVE-2024-46975US	—	0.15% (5th)	—	no fix	2025-02-22	≤ vers:android/12
CVE-2024-45580US	—	0.12% (2nd)	—	no fix	2025-03-03	≤ vers:android/12
CVE-2025-26427US	—	0.11% (1st)	—	no fix	2025-09-04	≤ vers:android/12
CVE-2025-21468US	—	0.11% (1st)	—	no fix	2025-05-06	≤ vers:android/12
CVE-2025-21467US	—	0.11% (1st)	—	no fix	2025-05-06	≤ vers:android/12
CVE-2025-21453US	—	0.11% (1st)	—	no fix	2025-05-06	≤ vers:android/12
CVE-2024-49845US	—	0.11% (1st)	—	no fix	2025-05-06	≤ vers:android/12
CVE-2024-49841US	—	0.11% (1st)	—	no fix	2025-05-06	≤ vers:android/12
CVE-2024-49835US	—	0.11% (1st)	—	no fix	2025-05-06	≤ vers:android/12
CVE-2025-26428US	—	0.10% (1st)	—	no fix	2025-09-04	≤ vers:android/12
CVE-2024-49739US	—	0.10% (1st)	—	no fix	2025-09-04	≤ vers:android/12
CVE-2025-0077US	—	0.10% (1st)	—	no fix	2025-09-04	≤ vers:android/12
CVE-2025-26426US	—	0.10% (1st)	—	no fix	2025-09-04	≤ vers:android/12
CVE-2025-26421US	—	0.10% (1st)	—	no fix	2025-09-04	≤ vers:android/12
CVE-2025-22425US	—OT elevated	0.10% (1st)	—	no fix	2025-09-04	≤ vers:android/12
CVE-2025-26424US	—	0.10% (1st)	—	no fix	2025-09-04	≤ vers:android/12
CVE-2025-26425US	—	0.09% (1st)	—	no fix	2025-09-04	≤ vers:android/12
CVE-2024-49842US	—	0.09% (1st)	—	no fix	2025-05-06	≤ vers:android/12
CVE-2023-35657US	—	0.09% (1st)	—	no fix	2025-09-04	≤ vers:android/12
CVE-2025-26444US	—	0.09% (0th)	—	no fix	2025-09-04	≤ vers:android/12
CVE-2025-26423US	—	0.09% (1st)	—	no fix	2025-09-04	≤ vers:android/12
CVE-2025-26422US	—	0.09% (0th)	—	no fix	2025-09-04	≤ vers:android/12
CVE-2025-26436US	high7.8OT elevated	0.09% (0th)	—	no fix	2025-09-04	≤ vers:android/12
CVE-2025-26440US	—OT elevated	0.09% (0th)	—	no fix	2025-09-04	≤ vers:android/12
CVE-2025-26420US	—	0.09% (0th)	—	no fix	2025-09-04	≤ vers:android/12
CVE-2025-26435US	high7.8	0.08% (0th)	—	no fix	2025-09-04	≤ vers:android/12
CVE-2025-26430US	high7.8	0.08% (0th)	—	no fix	2025-09-04	≤ vers:android/12
CVE-2025-26442US	medium5.5OT elevated	0.08% (0th)	—	no fix	2025-09-04	≤ vers:android/12
CVE-2025-26429US	—	0.08% (0th)	—	no fix	2025-09-04	≤ vers:android/12

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')9 CVEs
CWE-787Out-of-bounds Write6 CVEs
CWE-125Out-of-bounds Read5 CVEs
CWE-416Use After Free5 CVEs
CWE-823Use of Out-of-range Pointer Offset4 CVEs
CWE-126Buffer Over-read3 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs

sources (1)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)46 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan