Technology · Google
Google Android vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 628 vulnerabilities in Google Android: 29 in the last 7 days and 422 in the last 90 days, 49 of them critical and 19 exploited in the wild. The most recent, CVE-2026-95405, was published on 10 November 2026. 119 vulnerabilities in the last four weeks, down 4% on the four before (124). 2 critical against 5, 0 exploited in the wild against 1.
- Last 7 days
- 29
- Last 90 days
- 422
- Critical, all time
- 49
- Exploited in the wild
- 19
About Google Android
Mobile operating system for smartphones and tablets developed by Google.
Latest Google Android vulnerabilities
- CVE-2026-95405: Google Android Bluetooth buffer overflow in acquireMemoryinfo
- CVE-2026-95400: ST NFC HAL out-of-bounds write in global memoryinfo
- CVE-2026-95397: Android HEVC decoder buffer overflow in sub_layer_hrd_parametersinfo
- CVE-2026-59632: Android framework memory exhaustion in message queue handlinginfo
- CVE-2026-59626: Android use-after-free in UssiController connection listenerinfo
- CVE-2026-59611: Android integer overflow denial of service in frameworkinfo
- CVE-2026-59603: Android MtsMessageController double free in message retry handlinginfo
- CVE-2026-59599: Android Pixel hypervisor privilege escalationinfo
- CVE-2026-59597: Android Framework privilege escalation in telephony tunnel managementinfo
- CVE-2026-59595: Android SipStack stack exhaustion via unbounded recursioninfo
- CVE-2026-59583: Android SIP authentication credentials cleartext disclosure via scheme downgradeinfo
- CVE-2026-59582: Android integer overflow in UcePublishManager timer calculationinfo
- CVE-2026-58813: Linux kernel mmap bounds check vulnerability in mman.cinfo
- CVE-2026-58809: ARM SMMU v3 out-of-bounds write in domain configurationinfo
- CVE-2026-58783: Android kernel local denial of service due to logic errorinfo
- CVE-2026-58702: Android TimerAgent permission bypass in createIntentinfo
- CVE-2026-56980: Android Framework out-of-bounds write in data flow managerinfo
- CVE-2026-56971: Android IMS double free in AudioSession::SendInternalEventinfo
- CVE-2026-56951: Android Vulkan decoder pointer leak in descriptor set updateinfo
- CVE-2026-56947: Android Framework permission bypass in Telephony PhoneInterfaceManagerinfo
- CVE-2026-56946: ARM SMMUv3 privilege escalation in arm-smmu-v3 DMA mappinginfo
- CVE-2026-56935: Android KeyMint deleted key recovery due to logic errorinfo
- CVE-2026-56934: Linux IOMMU page table logic error in arm_lpae_split_blk_unmapinfo
- CVE-2026-56898: Android AES-256-CMAC message authentication code forgeryinfo
- CVE-2026-55362: Android framework out-of-bounds write in multiple filesinfo
Most severe Google Android vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2023-6345: Google Skia Integer Overflow Vulnerabilitycriticalexploited in the wildCVSS 9.6
- CVE-2023-2136: Google Chrome Skia Integer Overflow Vulnerabilitycriticalexploited in the wildCVSS 9.6
- CVE-2026-58704: Google Pixel improper authorization in cellular modemcriticalexploited in the wildCVSS 8.8EPSS 0.6%
- CVE-2026-3909: Google Skia out-of-bounds write in Google Chromecriticalexploited in the wildCVSS 8.8EPSS 0.4%
- CVE-2025-48543: Google Android Runtime use-after-free in system_servercriticalexploited in the wildCVSS 8.8EPSS 0.3%
- CVE-2025-48572: Google Android Framework privilege escalation via background activity launchcriticalexploited in the wildCVSS 7.8EPSS 0.3%
- CVE-2024-36971: Android Kernel Remote Code Execution Vulnerabilitycriticalexploited in the wildCVSS 7.8
- CVE-2023-35674: Android Framework Privilege Escalation Vulnerabilitycriticalexploited in the wildCVSS 7.8
- CVE-2023-20963: Android Framework Privilege Escalation Vulnerabilitycriticalexploited in the wildCVSS 7.8
- CVE-2011-1823: Android OS Privilege Escalation Vulnerabilitycriticalexploited in the wildCVSS 7.8
Vulnerabilities per week
119 vulnerabilities in the last four weeks, down 4% on the four before (124). 2 critical against 5, 0 exploited in the wild against 1. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 3 | 1 | |
| 24 Aug 2026 | 34 | 4 | |
| 31 Aug 2026 | 7 | 4 | |
| 7 Sep 2026 | 106 | 8 | |
| 14 Sep 2026 | 97 | 5 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 27 | 0 | |
| 12 Oct 2026 | 2 | 2 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 117 | 0 | |
| 9 Nov 2026 | 29 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Google Android vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/android)<a href="https://junglewise.ai/threats/technologies/android"><img src="https://junglewise.ai/threats/technologies/android/badge.svg" alt="Google Android vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/android.json, and this page as text at https://junglewise.ai/threats/technologies/android.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Google Android vulnerabilities", https://junglewise.ai/threats/technologies/android, 13 November 2026.