Software Detail

Software Informaton Top

Operating Systems

Software Detail

Android

Number Of NVD

6838

CRITICAL

484

HIGH

2986

MEDIUM

3124

LOW

236

URL	https://www.android.com/
Explanation	It is an operating system installed on smartphones provided by Google. Since it is open source, many manufacturers use it in their smartphones, tablets, and wearable devices. The support period differs for each development vendor. After Google provides a security patch, it is up to the vendor to provide the patch to the target devices.
Tag	GPL v2 LGPL 2.1+ Mobile Google Apache License v2.0

Add Information URL

No	Type	Name	URL
1			https://en.wikipedia.org/wiki/Android_version_history
2			https://source.android.com/setup/start/licenses
3			https://source.android.com/security/bulletin/
4			https://developer.android.com/
5			https://developer.android.com/about/versions/
6			https://android-developers.googleblog.com/

List Of Product [ Click to show release history and vulnerability information ]

No	Name	Latest Version	Release date	Initial release	Critical	High	Medium	Low
6831	Android 14	14.1	Nov. 6, 2024	Aug. 7, 2024	0	3	1	0
6832	Android 13	13.4	Aug. 7, 2023	Aug. 15, 2022	15	311	812	67
6833	Android 12	12.4	Oct. 17, 2022	Oct. 4, 2020	43	479	1193	106
6834	Android 11	11	Sept. 8, 2020	Sept. 8, 2020	58	636	1364	107
6835	Android 10	10	Sept. 3, 2019	Sept. 3, 2019	103	680	1055	110
6836	Android 9	9	Aug. 6, 2018	Aug. 6, 2018	112	463	331	35
6837	Android 8	8.1.0	Dec. 5, 2017	Aug. 21, 2017	144	529	318	25
6838	Android 7	7.1.2	April 4, 2017	Aug. 22, 2016	116	627	380	20
6839	Android 6	6.0.1	Dec. 7, 2015	Oct. 5, 2015	109	734	397	20
6840	Android 5	5.1.1	April 21, 2015	Nov. 12, 2014	67	661	317	16
6841	Android 4	4.4.4	June 19, 2014	Oct. 18, 2011	53	577	271	16
6842	Android 3	3.2.6	Feb. 1, 2012	Feb. 22, 2011	25	420	174	10
6843	Android 2	2.2.3	Nov. 21, 2011	Oct. 26, 2009	25	424	181	12
6844	Android 1	1.6	Sept. 15, 2009	Sept. 23, 2008	150	1558	2312	204
6845	Android 9.0	9.0			109	441	323	34
6846	Android 7.2	7.2			16	61	79	9
6847	Android 12.1	12.1			15	229	224	23
6848	Android 12.0l	12.0l			0	28	68	9
6849	Android 12.0	12.0			43	447	1159	104
6850	Android 11.0	11.0			58	636	1364	107
6851	Android 10.0	10.0			103	680	1055	110

NVD Vulnerability Information

CRITICAL
HIGH
MEDIUM
LOW

No	CVSS3 CVSS2	Level Attach Vector	Title	CWE	CVE	cpe23Uri	or less	Update date Published date	Show Affected	Exploit PoC Search
6831	- 7.2	HIGH	Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain privileges, as demonstrated by psneuter a…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-1149	cpe:2.3:o:google:android:2.2:rev1 cpe:2.3:o:google:android:2.2.1:* cpe:2.3:o:google:android:2.1:* cpe:2.3:o:go…	2.2.2	2024-11-21 10:25 2011-04-21	Show	GitHub Exploit DB Packet Storm

6832	- 5.0	MEDIUM	data/WorkingMessage.java in the Mms application in Android before 2.2.2 and 2.3.x before 2.3.2 does not properly manage the draft cache, which allows remote attackers to read SMS messages intended fo…	NVD-CWE-Other	CVE-2011-0680	cpe:2.3:o:google:android:2.3:rev1 cpe:2.3:o:google:android:2.2:rev1 cpe:2.3:o:google:android:2.1:* cpe:2.3:o:g…	2.2.1	2024-11-21 10:24 2011-02-1	Show	GitHub Exploit DB Packet Storm

6833	- 9.3	HIGH	WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-point data, which allows remote attackers to execute …	CWE-20 Improper Input Validation	CVE-2010-1807	cpe:2.3:o:google:android:2.0:* cpe:2.3:o:google:android:1.6:* cpe:2.3:o:google:android:1.5:* cpe:2.3:o:google:…	2.1	2024-11-21 10:15 2010-09-11	Show	GitHub Exploit DB Packet Storm

6834	- 4.3	MEDIUM	An unspecified function in the Dalvik API in Android 1.5 and earlier allows remote attackers to cause a denial of service (system process restart) via a crafted application, possibly a related issue …	NVD-CWE-noinfo	CVE-2009-3698	cpe:2.3:o:google:android::	1.5	2026-04-23 09:35 2009-10-14	Show	GitHub Exploit DB Packet Storm

6835	- 4.3	MEDIUM	The com.android.phone process in Android 1.5 CRBxx allows remote attackers to cause a denial of service (application restart and network disconnection) via an SMS message containing a malformed WAP P…	NVD-CWE-noinfo	CVE-2009-2999	cpe:2.3:o:google:android:1.5:*		2026-04-23 09:35 2009-10-14	Show	GitHub Exploit DB Packet Storm

6836	- 5.0	MEDIUM	Unspecified vulnerability in the com.android.phone process in Android 1.0, 1.1, and 1.5 allows remote attackers to cause a denial of service (network disconnection) via a crafted SMS message, as demo…	NVD-CWE-noinfo	CVE-2009-2656	cpe:2.3:o:google:android:1.5:* cpe:2.3:o:google:android:1.1:* cpe:2.3:o:google:android:1.0:*		2026-04-23 09:35 2009-08-4	Show	GitHub Exploit DB Packet Storm

6837	- 6.9	MEDIUM	Android 1.5 CRBxx allows local users to bypass the (1) Manifest.permission.CAMERA (aka android.permission.CAMERA) and (2) Manifest.permission.AUDIO_RECORD (aka android.permission.RECORD_AUDIO) config…	CWE-94 Code Injection	CVE-2009-2348	cpe:2.3:o:google:android:1.5:*		2026-04-23 09:35 2009-07-18	Show	GitHub Exploit DB Packet Storm

6838	- 4.3	MEDIUM	The PackageManagerService class in services/java/com/android/server/PackageManagerService.java in Android 1.5 through 1.5 CRB42 does not properly check developer certificates during processing of sha…	CWE-287 Improper Authentication	CVE-2009-1754	cpe:2.3:o:google:android:1.5:*		2026-04-23 09:35 2009-05-27	Show	GitHub Exploit DB Packet Storm