Known vulnerabilities in Google Android 14 2025-07-01

Vendor: Google
Version: 14 2025-07-01
Software CPE: cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Google Android version 14 2025-07-01 Google Android 14 2025-07-01 is affected by 13 vulnerabilities: 1 critical, 4 high, 2 medium, 6 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129551 - Improper input validation
CVE-2026-0073
CWE-20 High
Public exploit available
No
14 2026-05-01, 15 2026-05-01, 16-qpr2 2026-05-01, 16 2026-05-01 04.05.2026 SB2026050482
#VU122610 - Integer overflow
CVE-2026-21353
CWE-190 High
No
No
14 2026-06-01, 15 2026-06-01, 16-qpr2 2026-06-01, 16 2026-06-01 10.02.2026 SB20260210104
SB2026060197
#VU122609 - Out-of-bounds write
CVE-2026-21352
CWE-787 High
No
No
14 2026-06-01, 15 2026-06-01, 16-qpr2 2026-06-01, 16 2026-06-01 10.02.2026 SB20260210104
SB2026060197
#VU118928 - Improper input validation
CVE-2025-48615
CWE-20 Low
No
No
13 2025-12-01, 14 2025-12-01, 15 2025-12-01, 16 2025-12-01, 14 2026-06-01, 15 2026-06-01, 16-qpr2 2026-06-01, 16 2026-06-01 01.12.2025 SB2025120164
SB2026060197
#VU118953 - Improper input validation
CVE-2025-48612
CWE-20 Low
No
No
13 2025-12-01, 14 2025-12-01, 15 2025-12-01, 16 2025-12-01, 14 2026-06-01, 15 2026-06-01, 16-qpr2 2026-06-01, 16 2026-06-01 01.12.2025 SB2025120164
SB2026060197
#VU118956 - Exposure of sensitive information to an unauthorized actor
CVE-2025-48600
CWE-200 Low
No
No
15 2025-12-01, 16 2025-12-01, 14 2026-06-01, 15 2026-06-01, 16-qpr2 2026-06-01, 16 2026-06-01 01.12.2025 SB2025120164
SB2026060197
#VU118780 - Out-of-bounds read
CVE-2025-64505
CWE-125 Medium
No
No
14 2026-06-01, 15 2026-06-01, 16-qpr2 2026-06-01, 16 2026-06-01 26.11.2025 SB2025112638
SB2025112639
SB2025112819
and 21 more
#VU118778 - Out-of-bounds read
CVE-2025-64720
CWE-125 Medium
No
No
14 2026-06-01, 15 2026-06-01, 16-qpr2 2026-06-01, 16 2026-06-01 26.11.2025 SB2025112638
SB2025112639
SB2025112819
and 39 more
#VU118777 - Heap-based Buffer Overflow
CVE-2025-65018
CWE-122 Critical
Public exploit available
No
14 2026-06-01, 15 2026-06-01, 16-qpr2 2026-06-01, 16 2026-06-01 26.11.2025 SB2025112638
SB2025112639
SB2025112819
and 44 more
#VU117937 - Improper input validation
CVE-2025-48593
CWE-20 High
Public exploit available
No
13 2025-11-01, 14 2025-11-01, 15 2025-11-01, 16 2025-11-01 03.11.2025 SB2025110344
#VU114734 - Improper input validation
CVE-2025-48581
CWE-20 Low
No
No
16 2025-11-01, 14 2026-06-01, 15 2026-06-01, 16-qpr2 2026-06-01, 16 2026-06-01 02.09.2025 SB2025091260
SB2025110344
SB2026060197
#VU107063 - Improper input validation
CVE-2025-22424
CWE-20 Low
No
No
13 2025-04-01, 14 2025-04-01, 15 2025-04-01, 14 2026-06-01, 15 2026-06-01, 16-qpr2 2026-06-01, 16 2026-06-01 07.04.2025 SB2025040766
SB2026060197
#VU107064 - Improper input validation
CVE-2025-22426
CWE-20 Low
No
No
13 2025-04-01, 14 2025-04-01, 15 2025-04-01, 14 2026-06-01, 15 2026-06-01, 16-qpr2 2026-06-01, 16 2026-06-01 07.04.2025 SB2025040766
SB2026060197