[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4mMR8v2GIb5gVzFGG1Vv2YCKiib6Z0RUq7X_LD2zOU8":3,"g5a-family:google\u002Fandroid":646,"g5a-ex:google\u002Fandroid@*":661},{"success":4,"data":5},true,{"product":6,"versions":229,"topVulnerabilitiesByEpss":306,"kevVulnerabilities":362,"seoMetadata":625,"meta":644},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":228},"google","android",76,8589,34,"2026-04-06",[14,19,23,25,29,33,35,38,40,44,47,49,52,55,58,61,65,68,71,73,75,77,80,83,86,89,91,94,96,98,101,104,106,109,111,113,116,118,120,122,124,126,129,132,134,137,140,142,145,148,151,154,157,160,163,166,169,172,174,177,180,183,186,189,192,195,198,201,204,207,210,213,216,219,222,225],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"1.0",16,0,false,{"version":20,"cve_count":21,"kev_count":22,"has_kev":4},"10.0",1848,1,{"version":24,"cve_count":16,"kev_count":17,"has_kev":18},"1.1",{"version":26,"cve_count":27,"kev_count":28,"has_kev":4},"11.0",2102,3,{"version":30,"cve_count":31,"kev_count":32,"has_kev":4},"12.0",1914,4,{"version":34,"cve_count":17,"kev_count":17,"has_kev":18},"12.0l",{"version":36,"cve_count":37,"kev_count":28,"has_kev":4},"12.1",526,{"version":39,"cve_count":17,"kev_count":17,"has_kev":18},"12l",{"version":41,"cve_count":42,"kev_count":43,"has_kev":4},"13.0",1531,6,{"version":45,"cve_count":46,"kev_count":17,"has_kev":18},"13.0.0",15,{"version":48,"cve_count":28,"kev_count":17,"has_kev":18},"13.1",{"version":50,"cve_count":51,"kev_count":28,"has_kev":4},"14.0",503,{"version":53,"cve_count":54,"kev_count":17,"has_kev":18},"1.5",22,{"version":56,"cve_count":57,"kev_count":28,"has_kev":4},"15.0",269,{"version":59,"cve_count":60,"kev_count":17,"has_kev":18},"1.6",20,{"version":62,"cve_count":63,"kev_count":64,"has_kev":4},"16.0",88,2,{"version":66,"cve_count":67,"kev_count":17,"has_kev":18},"2.0",56,{"version":69,"cve_count":70,"kev_count":17,"has_kev":18},"2.0.1",55,{"version":72,"cve_count":17,"kev_count":17,"has_kev":18},"2020-06-01",{"version":74,"cve_count":17,"kev_count":17,"has_kev":18},"2024-04-05",{"version":76,"cve_count":17,"kev_count":17,"has_kev":18},"2.0.3",{"version":78,"cve_count":79,"kev_count":17,"has_kev":18},"2.1",58,{"version":81,"cve_count":82,"kev_count":17,"has_kev":18},"2.2",63,{"version":84,"cve_count":85,"kev_count":17,"has_kev":18},"2.2.1",60,{"version":87,"cve_count":88,"kev_count":17,"has_kev":18},"2.2.2",59,{"version":90,"cve_count":67,"kev_count":17,"has_kev":18},"2.2.3",{"version":92,"cve_count":93,"kev_count":17,"has_kev":18},"2.3",66,{"version":95,"cve_count":85,"kev_count":17,"has_kev":18},"2.3.1",{"version":97,"cve_count":85,"kev_count":17,"has_kev":18},"2.3.2",{"version":99,"cve_count":100,"kev_count":17,"has_kev":18},"2.3.3",62,{"version":102,"cve_count":103,"kev_count":17,"has_kev":18},"2.3.4",65,{"version":105,"cve_count":79,"kev_count":17,"has_kev":18},"2.3.5",{"version":107,"cve_count":108,"kev_count":17,"has_kev":18},"2.3.6",57,{"version":110,"cve_count":88,"kev_count":17,"has_kev":18},"2.3.7",{"version":112,"cve_count":100,"kev_count":22,"has_kev":4},"3.0",{"version":114,"cve_count":115,"kev_count":17,"has_kev":18},"3.1",61,{"version":117,"cve_count":85,"kev_count":17,"has_kev":18},"3.2",{"version":119,"cve_count":79,"kev_count":17,"has_kev":18},"3.2.1",{"version":121,"cve_count":79,"kev_count":17,"has_kev":18},"3.2.2",{"version":123,"cve_count":79,"kev_count":17,"has_kev":18},"3.2.4",{"version":125,"cve_count":79,"kev_count":17,"has_kev":18},"3.2.6",{"version":127,"cve_count":128,"kev_count":64,"has_kev":4},"4.0",275,{"version":130,"cve_count":131,"kev_count":17,"has_kev":18},"4.0.1",267,{"version":133,"cve_count":131,"kev_count":17,"has_kev":18},"4.0.2",{"version":135,"cve_count":136,"kev_count":17,"has_kev":18},"4.0.3",268,{"version":138,"cve_count":139,"kev_count":17,"has_kev":18},"4.0.4",266,{"version":141,"cve_count":139,"kev_count":17,"has_kev":18},"4.1",{"version":143,"cve_count":144,"kev_count":17,"has_kev":18},"4.1.1",17,{"version":146,"cve_count":147,"kev_count":17,"has_kev":18},"4.1.2",230,{"version":149,"cve_count":150,"kev_count":17,"has_kev":18},"4.2",239,{"version":152,"cve_count":153,"kev_count":17,"has_kev":18},"4.2.1",221,{"version":155,"cve_count":156,"kev_count":17,"has_kev":18},"4.2.2",227,{"version":158,"cve_count":159,"kev_count":17,"has_kev":18},"4.3",226,{"version":161,"cve_count":162,"kev_count":17,"has_kev":18},"4.3.1",219,{"version":164,"cve_count":165,"kev_count":17,"has_kev":18},"4.4",237,{"version":167,"cve_count":168,"kev_count":17,"has_kev":18},"4.4.1",204,{"version":170,"cve_count":171,"kev_count":17,"has_kev":18},"4.4.2",205,{"version":173,"cve_count":171,"kev_count":17,"has_kev":18},"4.4.3",{"version":175,"cve_count":176,"kev_count":17,"has_kev":18},"4.4.4",122,{"version":178,"cve_count":179,"kev_count":17,"has_kev":18},"5.0",331,{"version":181,"cve_count":182,"kev_count":17,"has_kev":18},"5.0.1",285,{"version":184,"cve_count":185,"kev_count":17,"has_kev":18},"5.0.2",193,{"version":187,"cve_count":188,"kev_count":17,"has_kev":18},"5.1",325,{"version":190,"cve_count":191,"kev_count":17,"has_kev":18},"5.1.0",272,{"version":193,"cve_count":194,"kev_count":17,"has_kev":18},"5.1.1",254,{"version":196,"cve_count":197,"kev_count":17,"has_kev":18},"6.0",709,{"version":199,"cve_count":200,"kev_count":17,"has_kev":18},"6.0.1",615,{"version":202,"cve_count":203,"kev_count":17,"has_kev":18},"7.0",770,{"version":205,"cve_count":206,"kev_count":17,"has_kev":18},"7.1",24,{"version":208,"cve_count":209,"kev_count":17,"has_kev":18},"7.1.0",308,{"version":211,"cve_count":212,"kev_count":17,"has_kev":18},"7.1.1",656,{"version":214,"cve_count":215,"kev_count":17,"has_kev":18},"7.1.2",594,{"version":217,"cve_count":218,"kev_count":17,"has_kev":18},"7.2",25,{"version":220,"cve_count":221,"kev_count":17,"has_kev":18},"8.0",741,{"version":223,"cve_count":224,"kev_count":17,"has_kev":18},"8.1",778,{"version":226,"cve_count":227,"kev_count":22,"has_kev":4},"9.0",819,"Android by Google is a technology product with 76 tracked versions and 8589 known security vulnerabilities including 34 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":22,"has_kev":4},{"version":24,"cve_count":16,"kev_count":17,"has_kev":18},{"version":26,"cve_count":27,"kev_count":28,"has_kev":4},{"version":30,"cve_count":31,"kev_count":32,"has_kev":4},{"version":34,"cve_count":17,"kev_count":17,"has_kev":18},{"version":36,"cve_count":37,"kev_count":28,"has_kev":4},{"version":39,"cve_count":17,"kev_count":17,"has_kev":18},{"version":41,"cve_count":42,"kev_count":43,"has_kev":4},{"version":45,"cve_count":46,"kev_count":17,"has_kev":18},{"version":48,"cve_count":28,"kev_count":17,"has_kev":18},{"version":50,"cve_count":51,"kev_count":28,"has_kev":4},{"version":53,"cve_count":54,"kev_count":17,"has_kev":18},{"version":56,"cve_count":57,"kev_count":28,"has_kev":4},{"version":59,"cve_count":60,"kev_count":17,"has_kev":18},{"version":62,"cve_count":63,"kev_count":64,"has_kev":4},{"version":66,"cve_count":67,"kev_count":17,"has_kev":18},{"version":69,"cve_count":70,"kev_count":17,"has_kev":18},{"version":72,"cve_count":17,"kev_count":17,"has_kev":18},{"version":74,"cve_count":17,"kev_count":17,"has_kev":18},{"version":76,"cve_count":17,"kev_count":17,"has_kev":18},{"version":78,"cve_count":79,"kev_count":17,"has_kev":18},{"version":81,"cve_count":82,"kev_count":17,"has_kev":18},{"version":84,"cve_count":85,"kev_count":17,"has_kev":18},{"version":87,"cve_count":88,"kev_count":17,"has_kev":18},{"version":90,"cve_count":67,"kev_count":17,"has_kev":18},{"version":92,"cve_count":93,"kev_count":17,"has_kev":18},{"version":95,"cve_count":85,"kev_count":17,"has_kev":18},{"version":97,"cve_count":85,"kev_count":17,"has_kev":18},{"version":99,"cve_count":100,"kev_count":17,"has_kev":18},{"version":102,"cve_count":103,"kev_count":17,"has_kev":18},{"version":105,"cve_count":79,"kev_count":17,"has_kev":18},{"version":107,"cve_count":108,"kev_count":17,"has_kev":18},{"version":110,"cve_count":88,"kev_count":17,"has_kev":18},{"version":112,"cve_count":100,"kev_count":22,"has_kev":4},{"version":114,"cve_count":115,"kev_count":17,"has_kev":18},{"version":117,"cve_count":85,"kev_count":17,"has_kev":18},{"version":119,"cve_count":79,"kev_count":17,"has_kev":18},{"version":121,"cve_count":79,"kev_count":17,"has_kev":18},{"version":123,"cve_count":79,"kev_count":17,"has_kev":18},{"version":125,"cve_count":79,"kev_count":17,"has_kev":18},{"version":127,"cve_count":128,"kev_count":64,"has_kev":4},{"version":130,"cve_count":131,"kev_count":17,"has_kev":18},{"version":133,"cve_count":131,"kev_count":17,"has_kev":18},{"version":135,"cve_count":136,"kev_count":17,"has_kev":18},{"version":138,"cve_count":139,"kev_count":17,"has_kev":18},{"version":141,"cve_count":139,"kev_count":17,"has_kev":18},{"version":143,"cve_count":144,"kev_count":17,"has_kev":18},{"version":146,"cve_count":147,"kev_count":17,"has_kev":18},{"version":149,"cve_count":150,"kev_count":17,"has_kev":18},{"version":152,"cve_count":153,"kev_count":17,"has_kev":18},{"version":155,"cve_count":156,"kev_count":17,"has_kev":18},{"version":158,"cve_count":159,"kev_count":17,"has_kev":18},{"version":161,"cve_count":162,"kev_count":17,"has_kev":18},{"version":164,"cve_count":165,"kev_count":17,"has_kev":18},{"version":167,"cve_count":168,"kev_count":17,"has_kev":18},{"version":170,"cve_count":171,"kev_count":17,"has_kev":18},{"version":173,"cve_count":171,"kev_count":17,"has_kev":18},{"version":175,"cve_count":176,"kev_count":17,"has_kev":18},{"version":178,"cve_count":179,"kev_count":17,"has_kev":18},{"version":181,"cve_count":182,"kev_count":17,"has_kev":18},{"version":184,"cve_count":185,"kev_count":17,"has_kev":18},{"version":187,"cve_count":188,"kev_count":17,"has_kev":18},{"version":190,"cve_count":191,"kev_count":17,"has_kev":18},{"version":193,"cve_count":194,"kev_count":17,"has_kev":18},{"version":196,"cve_count":197,"kev_count":17,"has_kev":18},{"version":199,"cve_count":200,"kev_count":17,"has_kev":18},{"version":202,"cve_count":203,"kev_count":17,"has_kev":18},{"version":205,"cve_count":206,"kev_count":17,"has_kev":18},{"version":208,"cve_count":209,"kev_count":17,"has_kev":18},{"version":211,"cve_count":212,"kev_count":17,"has_kev":18},{"version":214,"cve_count":215,"kev_count":17,"has_kev":18},{"version":217,"cve_count":218,"kev_count":17,"has_kev":18},{"version":220,"cve_count":221,"kev_count":17,"has_kev":18},{"version":223,"cve_count":224,"kev_count":17,"has_kev":18},{"version":226,"cve_count":227,"kev_count":22,"has_kev":4},[307,315,323,329,335,339,344,348,352,357],{"cveId":308,"description":309,"publishedDate":310,"cvssScore":311,"cvssVersion":312,"severity":313,"isKev":4,"epssScore":314},"CVE-2011-0611","Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a \"group of included constants,\" object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.","2011-04-13",8.8,"v3.1","High",0.9941,{"cveId":316,"description":317,"publishedDate":318,"cvssScore":319,"cvssVersion":320,"severity":321,"isKev":18,"epssScore":322},"CVE-2015-1538","Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496.","2015-10-01",10,"v2","Critical",0.99064,{"cveId":324,"description":325,"publishedDate":326,"cvssScore":327,"cvssVersion":320,"severity":321,"isKev":18,"epssScore":328},"CVE-2014-0569","Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors.","2014-10-15",9.3,0.9128,{"cveId":330,"description":331,"publishedDate":332,"cvssScore":333,"cvssVersion":312,"severity":313,"isKev":4,"epssScore":334},"CVE-2012-0754","Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.","2012-02-16",8.1,0.91085,{"cveId":336,"description":337,"publishedDate":318,"cvssScore":319,"cvssVersion":320,"severity":321,"isKev":18,"epssScore":338},"CVE-2015-3824","The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly restrict size addition, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via a crafted MPEG-4 tx3g atom, aka internal bug 20923261.",0.90483,{"cveId":340,"description":341,"publishedDate":342,"cvssScore":319,"cvssVersion":320,"severity":321,"isKev":18,"epssScore":343},"CVE-2015-3105","Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.","2015-06-10",0.90135,{"cveId":345,"description":346,"publishedDate":318,"cvssScore":319,"cvssVersion":320,"severity":321,"isKev":18,"epssScore":347},"CVE-2015-3829","Off-by-one error in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via crafted MPEG-4 covr atoms with a size equal to SIZE_MAX, aka internal bug 20923261.",0.89888,{"cveId":349,"description":350,"publishedDate":318,"cvssScore":319,"cvssVersion":320,"severity":321,"isKev":18,"epssScore":351},"CVE-2015-3864","Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data, aka internal bug 23034759.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3824.",0.87125,{"cveId":353,"description":354,"publishedDate":355,"cvssScore":327,"cvssVersion":320,"severity":321,"isKev":18,"epssScore":356},"CVE-2012-0779","Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an \"object confusion vulnerability,\" as exploited in the wild in May 2012.","2012-05-04",0.87085,{"cveId":358,"description":359,"publishedDate":360,"cvssScore":319,"cvssVersion":320,"severity":321,"isKev":18,"epssScore":361},"CVE-2011-2110","Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in June 2011.","2011-06-16",0.86421,[363,372,382,389,399,409,418,425,430,436,444,453,459,467,475,484,493,496,503,510,517,524,533,540,547,556,562,570,578,582,590,597,604,610,618],{"cveId":364,"description":365,"publishedDate":366,"cvssScore":311,"severity":313,"isKev":4,"epssScore":367,"cisaVulnName":368,"cisaDateAdded":369,"cisaShortDescription":370,"cisaRequiredAction":371},"CVE-2026-58704","In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal\u002Fadjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","2026-09-15",0.00625,"Google Pixel Improper Authorization Vulnerability","2026-09-16","Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":373,"description":374,"publishedDate":375,"cvssScore":376,"severity":313,"isKev":4,"epssScore":377,"cisaVulnName":378,"cisaDateAdded":379,"cisaShortDescription":380,"cisaRequiredAction":381},"CVE-2025-48633","In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","2025-12-08",7.8,0.00262,"Android Framework Information Disclosure Vulnerability","2025-12-02","Android Framework contains an unspecified vulnerability that allows for information disclosure.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":383,"description":384,"publishedDate":385,"cvssScore":311,"severity":313,"isKev":4,"epssScore":386,"cisaVulnName":387,"cisaDateAdded":385,"cisaShortDescription":388,"cisaRequiredAction":381},"CVE-2025-48543","In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","2025-09-04",0.00634,"Android Runtime Use-After-Free Vulnerability","Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation.",{"cveId":390,"description":391,"publishedDate":392,"cvssScore":393,"severity":394,"isKev":4,"epssScore":395,"cisaVulnName":396,"cisaDateAdded":397,"cisaShortDescription":398,"cisaRequiredAction":381},"CVE-2024-50302","In the Linux kernel, the following vulnerability has been resolved:\n\nHID: core: zero-initialize the report buffer\n\nSince the report buffer is used by all kinds of drivers in various ways, let's\nzero-initialize it during allocation to make sure that it can't be ever used\nto leak kernel memory via specially-crafted report.","2024-11-19",5.5,"Medium",0.00811,"Linux Kernel Use of Uninitialized Resource Vulnerability","2025-03-04","The Linux kernel contains a use of uninitialized resource vulnerability that allows an attacker to leak kernel memory via a specially crafted HID report.",{"cveId":400,"description":401,"publishedDate":402,"cvssScore":403,"severity":313,"isKev":4,"epssScore":404,"cisaVulnName":405,"cisaDateAdded":406,"cisaShortDescription":407,"cisaRequiredAction":408},"CVE-2024-43093","In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to  incorrect unicode normalization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","2024-11-13",7.3,0.00709,"Android Framework Privilege Escalation Vulnerability","2024-11-07","Android Framework contains an unspecified vulnerability that allows for privilege escalation.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":410,"description":411,"publishedDate":412,"cvssScore":311,"severity":313,"isKev":4,"epssScore":413,"cisaVulnName":414,"cisaDateAdded":415,"cisaShortDescription":416,"cisaRequiredAction":417},"CVE-2014-0502","Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.","2014-02-21",0.24817,"Adobe Flash Player Double Free Vulnerablity","2024-09-17","Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.","The impacted product is end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue utilization of the product.",{"cveId":419,"description":420,"publishedDate":421,"cvssScore":376,"severity":313,"isKev":4,"epssScore":422,"cisaVulnName":423,"cisaDateAdded":421,"cisaShortDescription":424,"cisaRequiredAction":408},"CVE-2024-32896","there is a possible way to bypass  due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","2024-06-13",0.02985,"Android Pixel Privilege Escalation Vulnerability","Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation.",{"cveId":426,"description":420,"publishedDate":74,"cvssScore":376,"severity":313,"isKev":4,"epssScore":427,"cisaVulnName":423,"cisaDateAdded":428,"cisaShortDescription":429,"cisaRequiredAction":408},"CVE-2024-29748",0.00676,"2024-04-04","Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin app.",{"cveId":431,"description":432,"publishedDate":74,"cvssScore":393,"severity":394,"isKev":4,"epssScore":433,"cisaVulnName":434,"cisaDateAdded":428,"cisaShortDescription":435,"cisaRequiredAction":408},"CVE-2024-29745","there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.",0.00486,"Android Pixel Information Disclosure Vulnerability","Android Pixel contains an information disclosure vulnerability in the fastboot firmware used to support unlocking, flashing, and locking affected devices.",{"cveId":437,"description":438,"publishedDate":439,"cvssScore":393,"severity":394,"isKev":4,"epssScore":440,"cisaVulnName":441,"cisaDateAdded":442,"cisaShortDescription":443,"cisaRequiredAction":408},"CVE-2023-21237","In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251586912","2023-06-28",0.00266,"Android Pixel Information Disclosure Vulnerability ","2024-03-05","Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information.",{"cveId":445,"description":446,"publishedDate":447,"cvssScore":448,"severity":394,"isKev":4,"epssScore":449,"cisaVulnName":450,"cisaDateAdded":451,"cisaShortDescription":452,"cisaRequiredAction":408},"CVE-2022-22265","An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.","2022-01-10",5,0.00389,"Samsung Mobile Devices Use-After-Free Vulnerability","2023-09-18","Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.",{"cveId":454,"description":455,"publishedDate":456,"cvssScore":376,"severity":313,"isKev":4,"epssScore":457,"cisaVulnName":405,"cisaDateAdded":458,"cisaShortDescription":407,"cisaRequiredAction":408},"CVE-2023-35674","In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","2023-09-11",0.02636,"2023-09-13",{"cveId":460,"description":461,"publishedDate":462,"cvssScore":376,"severity":313,"isKev":4,"epssScore":463,"cisaVulnName":405,"cisaDateAdded":464,"cisaShortDescription":465,"cisaRequiredAction":466},"CVE-2023-20963","In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-220302519","2023-03-24",0.01465,"2023-04-13","Android Framework contains an unspecified vulnerability that allows for privilege escalation after updating an app to a higher Target SDK with no additional execution privileges needed.","Apply updates per vendor instructions.",{"cveId":468,"description":469,"publishedDate":470,"cvssScore":376,"severity":313,"isKev":4,"epssScore":471,"cisaVulnName":472,"cisaDateAdded":473,"cisaShortDescription":474,"cisaRequiredAction":466},"CVE-2011-1823","The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.","2011-06-09",0.41367,"Android OS Privilege Escalation Vulnerability","2022-09-08","The vold volume manager daemon in Android kernel trusts messages from a PF_NETLINK socket, which allows an attacker to execute code and gain root privileges. This vulnerability is associated with GingerBreak and Exploit.AndroidOS.Lotoor.",{"cveId":476,"description":477,"publishedDate":478,"cvssScore":479,"severity":394,"isKev":4,"epssScore":480,"cisaVulnName":481,"cisaDateAdded":482,"cisaShortDescription":483,"cisaRequiredAction":466},"CVE-2022-2856","Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.","2022-09-26",6.5,0.04561,"Google Chromium Intents Insufficient Input Validation Vulnerability","2022-08-18","Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":485,"description":486,"publishedDate":487,"cvssScore":376,"severity":313,"isKev":4,"epssScore":488,"cisaVulnName":489,"cisaDateAdded":490,"cisaShortDescription":491,"cisaRequiredAction":492},"CVE-2011-0609","Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.","2011-03-15",0.63507,"Adobe Flash Player Unspecified Vulnerability","2022-06-08","Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":330,"description":331,"publishedDate":332,"cvssScore":333,"severity":313,"isKev":4,"epssScore":334,"cisaVulnName":494,"cisaDateAdded":490,"cisaShortDescription":495,"cisaRequiredAction":492},"Adobe Flash Player Memory Corruption Vulnerability","Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).",{"cveId":497,"description":498,"publishedDate":332,"cvssScore":499,"severity":394,"isKev":4,"epssScore":500,"cisaVulnName":501,"cisaDateAdded":490,"cisaShortDescription":502,"cisaRequiredAction":492},"CVE-2012-0767","Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka \"Universal XSS (UXSS),\" as exploited in the wild in February 2012.",6.1,0.06187,"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.",{"cveId":504,"description":505,"publishedDate":506,"cvssScore":311,"severity":313,"isKev":4,"epssScore":507,"cisaVulnName":508,"cisaDateAdded":490,"cisaShortDescription":509,"cisaRequiredAction":466},"CVE-2016-5198","V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read\u002Fwrite operations, leading to code execution, via a crafted HTML page.","2017-01-19",0.34164,"Google Chromium V8 Out-of-Bounds Memory Vulnerability","Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read\u002Fwrite operations, leading to code execution, via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":511,"description":512,"publishedDate":513,"cvssScore":311,"severity":313,"isKev":4,"epssScore":514,"cisaVulnName":515,"cisaDateAdded":490,"cisaShortDescription":516,"cisaRequiredAction":466},"CVE-2017-5030","Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.","2017-04-24",0.40635,"Google Chromium V8 Memory Corruption Vulnerability","Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":518,"description":519,"publishedDate":520,"cvssScore":311,"severity":313,"isKev":4,"epssScore":521,"cisaVulnName":522,"cisaDateAdded":490,"cisaShortDescription":523,"cisaRequiredAction":466},"CVE-2017-5070","Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.","2017-10-27",0.32071,"Google Chromium V8 Type Confusion Vulnerability","Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":525,"description":526,"publishedDate":527,"cvssScore":311,"severity":313,"isKev":4,"epssScore":528,"cisaVulnName":529,"cisaDateAdded":530,"cisaShortDescription":531,"cisaRequiredAction":532},"CVE-2016-1010","Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0963 and CVE-2016-0993.","2016-03-12",0.19333,"Adobe Flash Player and AIR Integer Overflow Vulnerability","2022-05-25","Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code.","The impacted products are end-of-life and should be disconnected if still in use.",{"cveId":534,"description":535,"publishedDate":536,"cvssScore":311,"severity":313,"isKev":4,"epssScore":537,"cisaVulnName":538,"cisaDateAdded":530,"cisaShortDescription":539,"cisaRequiredAction":492},"CVE-2015-8651","Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.","2015-12-28",0.67698,"Adobe Flash Player Integer Overflow Vulnerability","Integer overflow in Adobe Flash Player allows attackers to execute code.",{"cveId":541,"description":542,"publishedDate":543,"cvssScore":311,"severity":313,"isKev":4,"epssScore":544,"cisaVulnName":545,"cisaDateAdded":530,"cisaShortDescription":546,"cisaRequiredAction":532},"CVE-2016-0984","Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.","2016-02-10",0.54544,"Adobe Flash Player and AIR Use-After-Free Vulnerability","Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code.",{"cveId":548,"description":549,"publishedDate":550,"cvssScore":551,"severity":394,"isKev":4,"epssScore":552,"cisaVulnName":553,"cisaDateAdded":554,"cisaShortDescription":555,"cisaRequiredAction":466},"CVE-2021-0920","In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel","2021-12-15",6.4,0.00867,"Android Kernel Race Condition Vulnerability","2022-05-23","Android kernel contains a race condition, which allows for a use-after-free vulnerability. Exploitation can allow for privilege escalation.",{"cveId":557,"description":558,"publishedDate":550,"cvssScore":376,"severity":313,"isKev":4,"epssScore":559,"cisaVulnName":560,"cisaDateAdded":554,"cisaShortDescription":561,"cisaRequiredAction":466},"CVE-2021-1048","In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-204573007References: Upstream kernel",0.01058,"Android Kernel Use-After-Free Vulnerability","Android kernel contains a use-after-free vulnerability that allows for privilege escalation.",{"cveId":563,"description":564,"publishedDate":565,"cvssScore":376,"severity":313,"isKev":4,"epssScore":566,"cisaVulnName":567,"cisaDateAdded":568,"cisaShortDescription":569,"cisaRequiredAction":466},"CVE-2021-39793","In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-210470189References: N\u002FA","2022-03-16",0.00685,"Google Pixel Out-of-Bounds Write Vulnerability","2022-04-11","Google Pixel contains a possible out-of-bounds write due to a logic error in the code that could lead to local escalation of privilege.",{"cveId":571,"description":572,"publishedDate":573,"cvssScore":574,"severity":313,"isKev":4,"epssScore":575,"cisaVulnName":494,"cisaDateAdded":576,"cisaShortDescription":577,"cisaRequiredAction":492},"CVE-2012-2034","Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.","2012-06-09",7.5,0.07713,"2022-03-28","Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).",{"cveId":308,"description":309,"publishedDate":310,"cvssScore":311,"severity":313,"isKev":4,"epssScore":314,"cisaVulnName":579,"cisaDateAdded":580,"cisaShortDescription":581,"cisaRequiredAction":492},"Adobe Flash Player Remote Code Execution Vulnerability","2022-03-03","Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.",{"cveId":583,"description":584,"publishedDate":585,"cvssScore":586,"severity":321,"isKev":4,"epssScore":587,"cisaVulnName":588,"cisaDateAdded":580,"cisaShortDescription":589,"cisaRequiredAction":492},"CVE-2016-1019","Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.","2016-04-07",9.8,0.22316,"Adobe Flash Player Arbitrary Code Execution Vulnerability","Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.",{"cveId":591,"description":592,"publishedDate":593,"cvssScore":376,"severity":313,"isKev":4,"epssScore":594,"cisaVulnName":560,"cisaDateAdded":595,"cisaShortDescription":596,"cisaRequiredAction":466},"CVE-2019-2215","A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095","2019-10-11",0.72105,"2021-11-03","Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain \"AbstractEmu.\"",{"cveId":598,"description":599,"publishedDate":600,"cvssScore":376,"severity":313,"isKev":4,"epssScore":601,"cisaVulnName":602,"cisaDateAdded":595,"cisaShortDescription":603,"cisaRequiredAction":466},"CVE-2020-0041","In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145988638References: Upstream kernel","2020-03-10",0.03246,"Android Kernel Out-of-Bounds Write Vulnerability","Android Kernel binder_transaction of binder.c contains an out-of-bounds write vulnerability due to an incorrect bounds check that could allow for local privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0069 under exploit chain \"AbstractEmu.\"",{"cveId":605,"description":606,"publishedDate":600,"cvssScore":376,"severity":313,"isKev":4,"epssScore":607,"cisaVulnName":608,"cisaDateAdded":595,"cisaShortDescription":609,"cisaRequiredAction":466},"CVE-2020-0069","In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754",0.0137,"Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability","Multiple MediaTek chipsets contain an insufficient input validation vulnerability and have missing SELinux restrictions in the Command Queue drivers ioctl handlers. This causes an out-of-bounds write leading to privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0041 under exploit chain \"AbstractEmu.\"",{"cveId":611,"description":612,"publishedDate":613,"cvssScore":614,"severity":321,"isKev":4,"epssScore":615,"cisaVulnName":616,"cisaDateAdded":595,"cisaShortDescription":617,"cisaRequiredAction":466},"CVE-2020-16010","Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.","2020-11-03",9.6,0.06363,"Google Chrome for Android UI Heap Buffer Overflow Vulnerability","Google Chrome for Android UI contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page.",{"cveId":619,"description":620,"publishedDate":621,"cvssScore":499,"severity":394,"isKev":4,"epssScore":622,"cisaVulnName":623,"cisaDateAdded":595,"cisaShortDescription":624,"cisaRequiredAction":466},"CVE-2021-38000","Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page.","2021-11-23",0.04948,"Google Chromium Intents Improper Input Validation Vulnerability","Google Chromium Intents contains an improper input validation vulnerability that allows a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"title":626,"metaDescription":627,"keywords":628,"structuredData":629},"Android by Google - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Android by Google covering 76 versions with 8589 tracked vulnerabilities including 2 critical and 25 high-severity issues and 34 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Android vulnerabilities, Android security, Android CVE, Google Android, Android threat intelligence, Google security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Android KEV, Android exploited vulnerabilities",{"@context":630,"@type":631,"name":632,"description":627,"url":633,"manufacturer":634,"applicationCategory":638,"softwareVersion":639,"mainEntity":640},"https:\u002F\u002Fschema.org","SoftwareApplication","Android","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fgoogle\u002Fandroid",{"@type":635,"name":636,"url":637},"Organization","Google","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fgoogle","Security Software","76 versions tracked",{"@type":641,"name":642,"description":643,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Android Security Vulnerabilities","Security vulnerabilities affecting Android by Google",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":645,"apiVersion":112},"2026-10-28T15:54:58.485Z",[647,649,651,653,655,657,659],{"product":648,"cves":448},"android_one",{"product":650,"cves":28},"android_sdk",{"product":652,"cves":64},"android_debug_bridge",{"product":654,"cves":22},"android_browser",{"product":656,"cves":22},"android_api",{"product":658,"cves":22},"android_sdk_platform_tools",{"product":660,"cves":22},"android_tv",{"rows":662,"total":789,"capped":4,"failed":17},[663,667,671,675,679,683,687,691,696,700,704,708,712,716,721,725,729,734,738,742,746,750,754,759,763,767,771,775,781,785],{"cveId":364,"name":368,"severity":313,"cvss":311,"added":369,"epss":367,"published":664,"ranges":665,"checked":4,"hits":666,"covers":18},"2026-09-15T19:17:32.297",[],[],{"cveId":373,"name":378,"severity":313,"cvss":376,"added":379,"epss":377,"published":668,"ranges":669,"checked":4,"hits":670,"covers":18},"2025-12-08T17:16:19.61",[41,50,56,62],[],{"cveId":383,"name":387,"severity":313,"cvss":311,"added":385,"epss":386,"published":672,"ranges":673,"checked":4,"hits":674,"covers":18},"2025-09-04T19:15:40.78",[41,50,56,62],[],{"cveId":390,"name":396,"severity":394,"cvss":393,"added":397,"epss":395,"published":676,"ranges":677,"checked":4,"hits":678,"covers":18},"2024-11-19T02:16:32.32",[],[],{"cveId":400,"name":405,"severity":313,"cvss":403,"added":406,"epss":404,"published":680,"ranges":681,"checked":4,"hits":682,"covers":18},"2024-11-13T18:15:21.713",[30,36,41,50,56],[],{"cveId":410,"name":414,"severity":313,"cvss":311,"added":415,"epss":413,"published":684,"ranges":685,"checked":4,"hits":686,"covers":18},"2014-02-21T05:07:00.017",[],[],{"cveId":419,"name":423,"severity":313,"cvss":376,"added":421,"epss":422,"published":688,"ranges":689,"checked":4,"hits":690,"covers":18},"2024-06-13T21:15:54.08",[],[],{"cveId":426,"name":423,"severity":313,"cvss":376,"added":428,"epss":427,"published":692,"ranges":693,"checked":4,"hits":695,"covers":18},"2024-04-05T20:15:08.407",[694],"before 2024-04-05",[],{"cveId":431,"name":434,"severity":394,"cvss":393,"added":428,"epss":433,"published":697,"ranges":698,"checked":4,"hits":699,"covers":18},"2024-04-05T20:15:08.253",[],[],{"cveId":437,"name":441,"severity":394,"cvss":393,"added":442,"epss":440,"published":701,"ranges":702,"checked":4,"hits":703,"covers":18},"2023-06-28T18:15:16.56",[41],[],{"cveId":445,"name":450,"severity":394,"cvss":448,"added":451,"epss":449,"published":705,"ranges":706,"checked":4,"hits":707,"covers":18},"2022-01-10T14:12:35.837",[226,20,26,30],[],{"cveId":454,"name":405,"severity":313,"cvss":376,"added":458,"epss":457,"published":709,"ranges":710,"checked":4,"hits":711,"covers":18},"2023-09-11T21:15:42.193",[26,30,36,41],[],{"cveId":460,"name":405,"severity":313,"cvss":376,"added":464,"epss":463,"published":713,"ranges":714,"checked":4,"hits":715,"covers":18},"2023-03-24T20:15:10.01",[26,30,36,41],[],{"cveId":468,"name":472,"severity":313,"cvss":376,"added":473,"epss":471,"published":717,"ranges":718,"checked":4,"hits":720,"covers":18},"2011-06-09T10:36:27.68",[719,112],"2.0 to before 2.3.4",[],{"cveId":476,"name":481,"severity":394,"cvss":479,"added":482,"epss":480,"published":722,"ranges":723,"checked":4,"hits":724,"covers":18},"2022-09-26T16:15:11.207",[],[],{"cveId":485,"name":489,"severity":313,"cvss":376,"added":490,"epss":488,"published":726,"ranges":727,"checked":4,"hits":728,"covers":18},"2011-03-15T17:55:03.827",[],[],{"cveId":330,"name":494,"severity":313,"cvss":333,"added":490,"epss":334,"published":730,"ranges":731,"checked":4,"hits":733,"covers":18},"2012-02-16T19:55:01.13",[732,127],"2.0 to 3.2",[],{"cveId":497,"name":501,"severity":394,"cvss":499,"added":490,"epss":500,"published":735,"ranges":736,"checked":4,"hits":737,"covers":18},"2012-02-16T19:55:01.303",[732,127],[],{"cveId":504,"name":508,"severity":313,"cvss":311,"added":490,"epss":507,"published":739,"ranges":740,"checked":4,"hits":741,"covers":18},"2017-01-19T05:59:00.213",[],[],{"cveId":511,"name":515,"severity":313,"cvss":311,"added":490,"epss":514,"published":743,"ranges":744,"checked":4,"hits":745,"covers":18},"2017-04-24T23:59:00.19",[],[],{"cveId":518,"name":522,"severity":313,"cvss":311,"added":490,"epss":521,"published":747,"ranges":748,"checked":4,"hits":749,"covers":18},"2017-10-27T05:29:00.847",[],[],{"cveId":525,"name":529,"severity":313,"cvss":311,"added":530,"epss":528,"published":751,"ranges":752,"checked":4,"hits":753,"covers":18},"2016-03-12T15:59:25.09",[],[],{"cveId":534,"name":538,"severity":313,"cvss":311,"added":530,"epss":537,"published":755,"ranges":756,"checked":4,"hits":758,"covers":18},"2015-12-28T23:59:19.05",[757],"all versions",[],{"cveId":541,"name":545,"severity":313,"cvss":311,"added":530,"epss":544,"published":760,"ranges":761,"checked":4,"hits":762,"covers":18},"2016-02-10T20:59:32.563",[],[],{"cveId":548,"name":553,"severity":394,"cvss":551,"added":554,"epss":552,"published":764,"ranges":765,"checked":4,"hits":766,"covers":18},"2021-12-15T19:15:11.017",[],[],{"cveId":557,"name":560,"severity":313,"cvss":376,"added":554,"epss":559,"published":768,"ranges":769,"checked":4,"hits":770,"covers":18},"2021-12-15T19:15:14.917",[],[],{"cveId":563,"name":567,"severity":313,"cvss":376,"added":568,"epss":566,"published":772,"ranges":773,"checked":4,"hits":774,"covers":18},"2022-03-16T15:15:12.43",[],[],{"cveId":571,"name":494,"severity":313,"cvss":574,"added":576,"epss":575,"published":776,"ranges":777,"checked":4,"hits":780,"covers":18},"2012-06-09T00:55:00.987",[778,779],"2.0 to 3.2.6","4.0 to 4.4.4",[],{"cveId":308,"name":579,"severity":313,"cvss":311,"added":580,"epss":314,"published":782,"ranges":783,"checked":4,"hits":784,"covers":18},"2011-04-13T14:55:01.217",[],[],{"cveId":583,"name":588,"severity":321,"cvss":586,"added":580,"epss":587,"published":786,"ranges":787,"checked":4,"hits":788,"covers":18},"2016-04-07T10:59:01.447",[],[],35]