CISA KEV
Actively exploited vulnerabilities (CISA KEV)
5 actively exploited CVEs (Medium, Android) affect a tracked app or OS. CISA confirms exploitation in the wild for each one.
- Matching CVEs
- 5
- Actively exploited
- 5
- Publication window
- 2021-05-01 → 2025-12-08
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-48633
MEDIUM 5.5
In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in the code. … |
|
CVE-2024-50302
MEDIUM 5.5
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds… |
|
CVE-2024-39891
MEDIUM 5.3
In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-numb… |
|
CVE-2023-26083
MEDIUM · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-1906
MEDIUM · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.