Mobile Exploit Database

A curated archive of iOS and Android vulnerabilities, CVE metadata, affected versions, proof-of-concept code and downloadable artefacts. Search, filter, and pivot into the full write-up for any entry.

cd ./ios →cd ./android →

Mobile Exploit & Vulnerability Database

db/ios_exploit_db.json

🍎 iPhone Exploit DB

11 entries

cd ./ios →

db/android_exploit_db.json

🤖 Android Exploit DB

11 entries

cd ./android →

exploit-db.sh --query

AES-256 SECURED

$ search>

$ platform:

$ severity:

CVE	Platform	Title	Affected	Type	Sev	Date	Status
CVE-2026-43722	iOS	Kernel sensitive-state information disclosure	iOS/iPadOS < 26.5.2	InfoLeak	High	2026-06-29	Vendor confirmed	cat →
CVE-2026-0059	Android	Android System remote code execution	14, 15, 16, 16 QPR2	RCE	High	2026-06-01	Vendor confirmed	cat →
CVE-2026-0114	Android	Pixel modem remote code execution	Supported Google Pixel devices	RCE	Critical	2026-03-01	Vendor confirmed	cat →
CVE-2026-0006	Android	Android System remote code execution	Android 16	RCE	Critical	2026-03-01	Vendor confirmed	cat →
CVE-2025-31200	iOS	CoreAudio crafted-media code execution	iOS/iPadOS < 18.4.1	RCE	Critical	2025-04-16	Exploited in the wild	cat →
CVE-2025-31201	iOS	RPAC Pointer Authentication bypass	iOS/iPadOS < 18.4.1	Sandbox	High	2025-04-16	Exploited in the wild	cat →
CVE-2025-14174	iOS	WebKit memory corruption in targeted attacks	iOS versions before iOS 26	RCE	Critical	2025-12-12	Exploited in the wild	cat →
CVE-2026-0073	Android	adbd wireless debugging remote shell	14-16	RCE	Critical	2026-05-05	Publicly disclosed	cat →
CVE-2026-21385	Android	Graphics component buffer over-read	Qualcomm chipsets	InfoLeak	High	2026-03-01	Publicly disclosed	cat →
CVE-2026-0032	Android	mem_protect.c out-of-bounds write	Kernel 14-15	LPE	High	2026-03-02	Publicly disclosed	cat →
CVE-2026-20700	iOS	Memory corruption arbitrary code execution	< 26.3	RCE	Critical	2026-02-11	Publicly disclosed	cat →
CVE-2026-20640	iOS	iPhone Mirroring UI state disclosure	< 26.3	InfoLeak	High	2026-02-13	Publicly disclosed	cat →
CVE-2025-43529	iOS	WebKit Use-After-Free arbitrary code	< 26.2	RCE	Critical	2025-12-15	Publicly disclosed	cat →
CVE-2025-48543	Android	Chrome sandbox escape use-after-free	System 14-16	Sandbox	High	2025-11-20	Publicly disclosed	cat →
CVE-2024-23222	iOS	WebKit RCE via type confusion	≤17.3	RCE	Critical	2024-01-22	Publicly disclosed	cat →
CVE-2024-44308	iOS	JavaScriptCore UXSS chain	≤18.1	RCE	Critical	2024-11-19	Publicly disclosed	cat →
CVE-2023-41064	iOS	BLASTPASS ImageIO 0-click	≤16.6	0-click	Critical	2023-09-07	Publicly disclosed	cat →
CVE-2022-32893	iOS	WebKit OOB write → kernel LPE	≤15.6	LPE	Critical	2022-08-17	Publicly disclosed	cat →
CVE-2024-32896	Android	Pixel firmware privilege escalation	Pixel ≤14	LPE	High	2024-06-11	Publicly disclosed	cat →
CVE-2024-43093	Android	Framework path traversal sandbox escape	12-15	Sandbox	High	2024-11-04	Publicly disclosed	cat →
CVE-2023-21492	Android	Samsung kernel pointer leak	Samsung ≤13	InfoLeak	Medium	2023-05-09	Publicly disclosed	cat →
CVE-2023-20963	Android	WorkSource parcel mismatch (in-the-wild)	≤13	LPE	High	2023-03-13	Publicly disclosed	cat →

22 record(s)

Attorney-Grade Confidential Intake

Confidential Case Inquiry

Submit your inquiry directly to our forensic laboratory. Every case is treated under strict non-disclosure.

secure_case_intake.enc

AES-256 SECURED

End-to-End Encrypted Transmission

Response SLA: 2h (Urgent) / 24h (Standard)

Case category

Urgency

Your preferred contact *

Used strictly to send your case review and confidentiality agreement.

Device or system

Helps us prepare matching forensic tooling.

Case details and symptoms *

Pre-engagement mutual NDA: Deliver a signed mutual non-disclosure agreement before technical forensic dumps or sensitive logs are shared.

Zero-log guarantee. Inquiries sanitized post-review.