Software Detail

Software Informaton Top

Operating Systems

Software Detail

Android

Number Of NVD

6838

CRITICAL

484

HIGH

2986

MEDIUM

3124

LOW

236

URL	https://www.android.com/
Explanation	It is an operating system installed on smartphones provided by Google. Since it is open source, many manufacturers use it in their smartphones, tablets, and wearable devices. The support period differs for each development vendor. After Google provides a security patch, it is up to the vendor to provide the patch to the target devices.
Tag	Apache License v2.0 GPL v2 LGPL 2.1+ Mobile Google

Add Information URL

No	Type	Name	URL
1			https://en.wikipedia.org/wiki/Android_version_history
2			https://source.android.com/setup/start/licenses
3			https://source.android.com/security/bulletin/
4			https://developer.android.com/
5			https://developer.android.com/about/versions/
6			https://android-developers.googleblog.com/

List Of Product [ Click to show release history and vulnerability information ]

No	Name	Latest Version	Release date	Initial release	Critical	High	Medium	Low
521	Android 14	14.1	Nov. 6, 2024	Aug. 7, 2024	0	3	1	0
522	Android 13	13.4	Aug. 7, 2023	Aug. 15, 2022	15	311	812	67
523	Android 12	12.4	Oct. 17, 2022	Oct. 4, 2020	43	479	1193	106
524	Android 11	11	Sept. 8, 2020	Sept. 8, 2020	58	636	1364	107
525	Android 10	10	Sept. 3, 2019	Sept. 3, 2019	103	680	1055	110
526	Android 9	9	Aug. 6, 2018	Aug. 6, 2018	112	463	331	35
527	Android 8	8.1.0	Dec. 5, 2017	Aug. 21, 2017	144	529	318	25
528	Android 7	7.1.2	April 4, 2017	Aug. 22, 2016	116	627	380	20
529	Android 6	6.0.1	Dec. 7, 2015	Oct. 5, 2015	109	734	397	20
530	Android 5	5.1.1	April 21, 2015	Nov. 12, 2014	67	661	317	16
531	Android 4	4.4.4	June 19, 2014	Oct. 18, 2011	53	577	271	16
532	Android 3	3.2.6	Feb. 1, 2012	Feb. 22, 2011	25	420	174	10
533	Android 2	2.2.3	Nov. 21, 2011	Oct. 26, 2009	25	424	181	12
534	Android 1	1.6	Sept. 15, 2009	Sept. 23, 2008	150	1558	2312	204
535	Android 9.0	9.0			109	441	323	34
536	Android 7.2	7.2			16	61	79	9
537	Android 12.1	12.1			15	229	224	23
538	Android 12.0l	12.0l			0	28	68	9
539	Android 12.0	12.0			43	447	1159	104
540	Android 11.0	11.0			58	636	1364	107
541	Android 10.0	10.0			103	680	1055	110

NVD Vulnerability Information

CRITICAL
HIGH
MEDIUM
LOW

No	CVSS3 CVSS2	Level Attach Vector	Title	CWE	CVE	cpe23Uri	less than	Update date Published date	Show Affected	Exploit PoC Search
521	7.8 -	HIGH Local	In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges…	CWE-203 Information Exposure Through Discrepancy	CVE-2023-21298	cpe:2.3:o:google:android::	14.0	2024-11-21 16:42 2023-10-31	Show	GitHub Exploit DB Packet Storm

522	4.4 -	MEDIUM Local	In SEPolicy, there is a possible way to access the factory MAC address due to a permissions bypass. This could lead to local information disclosure with System execution privileges needed. User inter…	CWE-287 Improper Authentication	CVE-2023-21297	cpe:2.3:o:google:android::	14.0	2024-11-21 16:42 2023-10-31	Show	GitHub Exploit DB Packet Storm

523	5.5 -	MEDIUM Local	In Permission, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local escalation of privileg…	CWE-203 Information Exposure Through Discrepancy	CVE-2023-21296	cpe:2.3:o:google:android::	14.0	2024-11-21 16:42 2023-10-31	Show	GitHub Exploit DB Packet Storm

524	5.5 -	MEDIUM Local	In SliceManagerService, there is a possible way to check if a content provider is installed due to a missing null check. This could lead to local information disclosure with no additional execution p…	NVD-CWE-noinfo	CVE-2023-21295	cpe:2.3:o:google:android::	14.0	2024-11-21 16:42 2023-10-31	Show	GitHub Exploit DB Packet Storm

525	5.5 -	MEDIUM Local	In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User …	CWE-862 Missing Authorization	CVE-2023-21294	cpe:2.3:o:google:android::	14.0	2024-11-21 16:42 2023-10-31	Show	GitHub Exploit DB Packet Storm

526	5.5 -	MEDIUM Local	In PackageManagerNative, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local escalation o…	CWE-203 Information Exposure Through Discrepancy	CVE-2023-21293	cpe:2.3:o:google:android::	14.0	2024-11-21 16:42 2023-10-31	Show	GitHub Exploit DB Packet Storm

527	5.5 -	MEDIUM Local	In Usage Stats Service, there is a possible way to determine whether an app is installed, without query permissions due to side channel information disclosure. This could lead to local information di…	CWE-203 Information Exposure Through Discrepancy	CVE-2022-20264	cpe:2.3:o:google:android::	14.0	2024-11-21 15:42 2023-10-31	Show	GitHub Exploit DB Packet Storm

528	7.8 -	HIGH Local	In NFC, there is a possible way to setup a default contactless payment app without user consent due to a missing permission check. This could lead to local escalation of privilege with no additional …	CWE-862 Missing Authorization	CVE-2021-39810	cpe:2.3:o:google:android:14.0:* cpe:2.3:o:google:android::	14.0	2024-11-21 15:20 2023-10-31	Show	GitHub Exploit DB Packet Storm

529	3.3 -	LOW Local	In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges neede…	NVD-CWE-Other	CVE-2023-40138	cpe:2.3:o:google:android:13.0:* cpe:2.3:o:google:android:12.1:* cpe:2.3:o:google:android:12.0:* cpe:2.3:o:goog…		2024-11-21 17:18 2023-10-28	Show	GitHub Exploit DB Packet Storm

530	7.8 -	HIGH Local	In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privi…	NVD-CWE-noinfo	CVE-2023-40117	cpe:2.3:o:google:android:13.0:* cpe:2.3:o:google:android:12.1:* cpe:2.3:o:google:android:12.0:* cpe:2.3:o:goog…		2024-11-21 17:18 2023-10-28	Show	GitHub Exploit DB Packet Storm