ACTIVELY EXPLOITED
CVE-2019-2215: Android Kernel Use-After-Free Vulnerability
| Vendor | Android |
|---|---|
| Product | Android Kernel |
| Actively exploited | Yes |
| Added to CISA KEV | 3 Nov 2021 |
| CISA federal deadline | 3 May 2022 |
| Weakness (CWE) | CWE-416 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain "AbstractEmu."
SOURCES
Other Android flaws
- CVE-2025-48595: Android Framework Integer Overflow Vulnerability
- CVE-2025-48633: Android Framework Information Disclosure Vulnerability
- CVE-2025-48572: Android Framework Privilege Escalation Vulnerability
- CVE-2025-48543: Android Runtime Use-After-Free Vulnerability
- CVE-2024-43093: Android Framework Privilege Escalation Vulnerability
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.