AN
Product
Android
On CISA KEVExploited in the wild
502
CVEs
12
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 181Medium 243Low 65
Watch
Add Android to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-21487 | 3.3 | May 4 | Improper access control vulnerability in Telephony framework prior to SMR May-2023 Release 1 allows local attackers to change a call setting Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2023-21458 | 3.3 | Mar 16 | Improper privilege management vulnerability in PhoneStatusBarPolicy in System UI prior to SMR Mar-2023 Release 1 allows attacker to turn off Do not disturb via unprotected intent Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2023-21452 | 3.3 | Mar 16 | Improper usage of implicit intent in Bluetooth prior to SMR Mar-2023 Release 1 allows attacker to get MAC address of connected device Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2023-21436 | 3.3 | Feb 9 | Improper usage of implicit intent in Contacts prior to SMR Feb-2023 Release 1 allows attacker to get account ID Affected: 10.0; 10.0; 10.0; 10.0; 10.0; 10.0; +34 more |
| CVE-2023-21429 | 3.3 | Feb 9 | Improper usage of implict intent in ePDG prior to SMR JAN-2023 Release 1 allows attacker to access SSID Affected: 10.0; 10.0; 10.0; 10.0; 10.0; 10.0; +34 more |
| CVE-2023-21428 | 3.3 | Feb 9 | Improper input validation vulnerability in TelephonyUI prior to SMR Jan-2023 Release 1 allows attackers to configure Preferred Call Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2023-21424 | 3.3 | Feb 9 | Improper Handling of Insufficient Permissions or Privileges vulnerability in SemChameleonHelper prior to SMR Jan-2023 Release 1 allows attacker to modify network related values,… Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2026-21006 | 2.4 | Apr 13 | Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents Affected: 15.0; 15.0; 15.0; 15.0; 15.0; 15.0; +10 more |
| CVE-2026-20989 | 2.4 | Mar 16 | Improper verification of cryptographic signature in Font Settings prior to SMR Mar-2026 Release 1 allows physical attackers to use custom font Affected: 16.0; 16.0; 16.0; 16.0; 16.0; 16.0; +2 more |
| CVE-2025-21046 | 2.4 | Oct 10 | Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list Affected: 13.0; 13.0; 13.0; 13.0; 13.0; 13.0; +34 more |
| CVE-2024-49414 | 2.4 | Dec 3 | Authentication Bypass Using an Alternate Path in Dex Mode prior to SMR Dec-2024 Release 1 allows physical attackers to temporarily access to recent app list Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more |
| CVE-2024-34682 | 2.4 | Nov 6 | Improper authorization in Settings prior to SMR Nov-2024 Release 1 allows physical attackers to access stored WiFi password in Maintenance Mode Affected: 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +31 more |
| CVE-2024-34649 | 2.4 | Sep 4 | Improper access control in new Dex Mode in multitasking framework prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access an unlocked screen Affected: 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +29 more |
| CVE-2024-20855 | 2.4 | May 7 | Improper access control vulnerability in multitasking framework prior to SMR May-2024 Release 1 allows physical attackers to access unlocked screen for a while Affected: 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +25 more |
| CVE-2023-21454 | 2.4 | Mar 16 | Improper authorization in Samsung Keyboard prior to SMR Mar-2023 Release 1 allows physical attacker to access users text history on the lockscreen Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)