Read the docs

Android

Records78All Threatist records
Exploited (KEV)17In CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high56CVSS 7.0–8.9

Exploited now

Android records in CISA KEV
TI-2025-30872 Android Framework Integer Overflow Vulnerability Priority CRITICAL 96KEV 2026-06-02TI-2025-30849 Android Framework Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2025-12-02TI-2025-30910 Android Framework Information Disclosure Vulnerability Priority HIGH 82KEV 2025-12-02TI-2025-30821 Android Runtime Use-After-Free Vulnerability Priority CRITICAL 97KEV 2025-09-04TI-2024-28769 Android Framework Privilege Escalation Vulnerability Priority CRITICAL 91KEV 2024-11-07TI-2024-24518 Android Kernel Remote Code Execution Vulnerability Priority CRITICAL 93KEV 2024-08-07

Components

Products in the NVD configurations · select one to filter the records
Android Browser 1 record LOW Android Sdk 1 record LOW Opencore 1 record LOW Play Core Library 1 record MEDIUM

Records

1 record in Android Browser · all components

TI-2008-06984 CVE-2008-7298 · GHSA-w454-mc57-3f76

The Android browser in Android cannot properly restrict modifications to cookies…

Priority LOW 28

The Android browser in Android cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.0099 Published 2011-08-09 No fix listed CWE-264
Open these records in search →