| Android | Number Of NVD | 6904 | CRITICAL | 484 | HIGH | 3022 | MEDIUM | 3149 | LOW | 241 |
| URL | https://www.android.com/ | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Explanation | It is an operating system installed on smartphones provided by Google. Since it is open source, many manufacturers use it in their smartphones, tablets, and wearable devices. The support period differs for each development vendor. After Google provides a security patch, it is up to the vendor to provide the patch to the target devices. |
||||||||
| Tag | |||||||||
| No | Type | Name | URL |
|---|---|---|---|
| 1 | https://en.wikipedia.org/wiki/Android_version_history | ||
| 2 | https://source.android.com/setup/start/licenses | ||
| 3 | https://source.android.com/security/bulletin/ | ||
| 4 | https://developer.android.com/ | ||
| 5 | https://developer.android.com/about/versions/ | ||
| 6 | https://android-developers.googleblog.com/ |
| No | Name | Latest Version | Release date | Initial release | Normal Support | Security Support Service Pack Support |
Extended for a fee |
Critical | High | Medium | Low |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 6691 | Android 17 | June 16, 2026 | June 16, 2026 | 0 | 0 | 0 | 0 | ||||
| 6692 | Android 14 | 14.1 | Nov. 6, 2024 | Aug. 7, 2024 | 0 | 3 | 1 | 0 | |||
| 6693 | Android 13 | 13.4 | Aug. 7, 2023 | Aug. 15, 2022 | 15 | 317 | 812 | 67 | |||
| 6694 | Android 12 | 12.4 | Oct. 17, 2022 | Oct. 4, 2020 | 43 | 479 | 1193 | 106 | |||
| 6695 | Android 11 | 11 | Sept. 8, 2020 | Sept. 8, 2020 | 58 | 636 | 1364 | 107 | |||
| 6696 | Android 10 | 10 | Sept. 3, 2019 | Sept. 3, 2019 | 103 | 680 | 1055 | 110 | |||
| 6697 | Android 9 | 9 | Aug. 6, 2018 | Aug. 6, 2018 | 112 | 463 | 331 | 35 | |||
| 6698 | Android 8 | 8.1.0 | Dec. 5, 2017 | Aug. 21, 2017 | 144 | 529 | 318 | 25 | |||
| 6699 | Android 7 | 7.1.2 | April 4, 2017 | Aug. 22, 2016 | 116 | 627 | 380 | 20 | |||
| 6700 | Android 6 | 6.0.1 | Dec. 7, 2015 | Oct. 5, 2015 | 109 | 734 | 397 | 20 | |||
| 6701 | Android 5 | 5.1.1 | April 21, 2015 | Nov. 12, 2014 | 67 | 661 | 317 | 16 | |||
| 6702 | Android 4 | 4.4.4 | June 19, 2014 | Oct. 18, 2011 | 53 | 577 | 271 | 16 | |||
| 6703 | Android 3 | 3.2.6 | Feb. 1, 2012 | Feb. 22, 2011 | 25 | 420 | 174 | 10 | |||
| 6704 | Android 2 | 2.2.3 | Nov. 21, 2011 | Oct. 26, 2009 | 25 | 424 | 181 | 12 | |||
| 6705 | Android 1 | 1.6 | Sept. 15, 2009 | Sept. 23, 2008 | 150 | 1594 | 2337 | 209 | |||
| 6706 | Android 9.0 | 9.0 | 109 | 441 | 323 | 34 | |||||
| 6707 | Android 7.2 | 7.2 | 16 | 61 | 79 | 9 | |||||
| 6708 | Android 12.1 | 12.1 | 15 | 229 | 224 | 23 | |||||
| 6709 | Android 12.0l | 12.0l | 0 | 28 | 68 | 9 | |||||
| 6710 | Android 12.0 | 12.0 | 43 | 447 | 1159 | 104 | |||||
| 6711 | Android 11.0 | 11.0 | 58 | 636 | 1364 | 107 | |||||
| 6712 | Android 10.0 | 10.0 | 103 | 680 | 1055 | 110 |
| No | CVSS3 CVSS2 |
Level Attach Vector |
Title | CWE | CVE | cpe23Uri | or higher | or less | more than | less than | Update date Published date |
Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 6691 |
7.8 9.3 |
HIGH
Local |
Wi-Fi in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not prevent use of a Wi-Fi CA certificate in an unrelated CA role, which allows attackers to … |
CWE-264
Permissions, Privileges, and Access Controls |
CVE-2016-2422 |
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl… |
2024-11-21 11:48 2016-04-18 |
Show | GitHub Exploit DB Packet Storm | ||||
| 6692 |
6.1 6.6 |
MEDIUM
Physics |
Setup Wizard in Android 5.1.x before 5.1.1 and 6.x before 2016-04-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified … |
CWE-264
Permissions, Privileges, and Access Controls |
CVE-2016-2421 |
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl… |
2024-11-21 11:48 2016-04-18 |
Show | GitHub Exploit DB Packet Storm | ||||
| 6693 |
7.8 9.3 |
HIGH
Local |
rootdir/init.rc in Android 4.x before 4.4.4 does not ensure that the /data/tombstones directory exists for the Debuggerd component, which allows attackers to gain privileges via a crafted application… |
CWE-264
Permissions, Privileges, and Access Controls |
CVE-2016-2420 |
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl… |
2024-11-21 11:48 2016-04-18 |
Show | GitHub Exploit DB Packet Storm | ||||
| 6694 |
9.8 10.0 |
CRITICAL
Network |
media/libmedia/IDrm.cpp in mediaserver in Android 6.x before 2016-04-01 does not initialize a certain key-request data structure, which allows attackers to obtain sensitive information from process m… |
CWE-264
Permissions, Privileges, and Access Controls |
CVE-2016-2419 |
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* |
2024-11-21 11:48 2016-04-18 |
Show | GitHub Exploit DB Packet Storm | ||||
| 6695 |
9.8 10.0 |
CRITICAL
Network |
media/libmedia/IOMX.cpp in mediaserver in Android 6.x before 2016-04-01 does not initialize certain metadata buffer pointers, which allows attackers to obtain sensitive information from process memor… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2016-2418 |
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* |
2024-11-21 11:48 2016-04-18 |
Show | GitHub Exploit DB Packet Storm | ||||
| 6696 |
9.8 10.0 |
CRITICAL
Network |
media/libmedia/IOMX.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not initialize a parameter data structure, which allows atta… |
CWE-264
Permissions, Privileges, and Access Controls |
CVE-2016-2417 |
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl… |
2024-11-21 11:48 2016-04-18 |
Show | GitHub Exploit DB Packet Storm | ||||
| 6697 |
9.8 10.0 |
CRITICAL
Network |
libs/gui/BufferQueueConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check for the android.permission.DUMP permissio… |
CWE-264
Permissions, Privileges, and Access Controls |
CVE-2016-2416 |
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl… |
2024-11-21 11:48 2016-04-18 |
Show | GitHub Exploit DB Packet Storm | ||||
| 6698 |
5.5 7.1 |
MEDIUM
Local |
exchange/eas/EasAutoDiscover.java in the Autodiscover implementation in Exchange ActiveSync in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to obtain sen… |
CWE-200
Information Exposure |
CVE-2016-2415 |
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl… |
2024-11-21 11:48 2016-04-18 |
Show | GitHub Exploit DB Packet Storm | ||||
| 6699 |
6.2 4.9 |
MEDIUM
Local |
The Minikin library in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider negative size values in font data, which allows remote attackers to cause a… |
CWE-20
Improper Input Validation |
CVE-2016-2414 |
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl… |
2024-11-21 11:48 2016-04-18 |
Show | GitHub Exploit DB Packet Storm | ||||
| 6700 |
7.8 9.3 |
HIGH
Local |
media/libmedia/IOMX.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not initialize a handle pointer, which allows attackers to gain privileges via… |
CWE-264
Permissions, Privileges, and Access Controls |
CVE-2016-2413 |
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl… |
2024-11-21 11:48 2016-04-18 |
Show | GitHub Exploit DB Packet Storm |