Google Android 11

productDE

cpe:/o:google:android:11.0

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

EPSS ≥ 10%

by severity

6critical23high14medium0low

updated 2026-10-28

vulnerabilities (44)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-11261US	high7.8OT critical	1.60% (76th)	KEV	no fix	2021-06-09	—
CVE-2021-0316US	critical9.8	3.19% (88th)	Exploit	no fix	2021-01-11	—
CVE-2021-0313US	high7.5	1.68% (77th)	Exploit	no fix	2021-01-11	—
CVE-2016-6328US	high8.1	1.68% (77th)	Exploit	no fix	2018-10-31	—
CVE-2020-0471US	critical9.8	1.66% (77th)	Exploit	no fix	2021-01-11	—
CVE-2021-0308US	medium6.8	0.45% (39th)	Exploit	no fix	2021-01-11	—
CVE-2021-0315US	high7.3	0.29% (22nd)	Exploit	no fix	2021-01-11	—
CVE-2021-0306US	high7.8	0.27% (19th)	Exploit	no fix	2021-01-11	—
CVE-2021-0319US	high7.3OT elevated	0.27% (19th)	Exploit	no fix	2021-01-11	—
CVE-2021-0318US	high7.8	0.27% (19th)	Exploit	no fix	2021-01-11	—
CVE-2021-0312US	medium6.5	1.15% (67th)	—	no fix	2021-01-11	—
CVE-2021-0311US	medium6.5	1.15% (67th)	—	no fix	2021-01-11	—
CVE-2020-11182US	critical9.8	0.81% (57th)	—	no fix	2021-06-09	—
CVE-2020-11134US	critical9.8	0.80% (56th)	—	no fix	2021-06-09	—
CVE-2020-11159US	critical9.1	0.80% (56th)	—	no fix	2021-06-09	—
CVE-2020-11126US	critical9.1	0.80% (56th)	—	no fix	2021-06-09	—
CVE-2020-10732US	medium4.4	0.62% (49th)	—	no fix	2020-06-12	—
CVE-2020-11241US	high7.5	0.60% (48th)	—	no fix	2021-06-09	—
CVE-2020-11238US	high7.5	0.60% (48th)	—	no fix	2021-06-09	—
CVE-2020-10766US	medium5.5	0.46% (40th)	—	no fix	2020-09-15	—
CVE-2020-11239US	high7.8	0.22% (13th)	—	no fix	2021-06-09	—
CVE-2020-27059US	high7.8	0.22% (12th)	—	no fix	2021-01-11	—
CVE-2020-11181US	high7.8	0.21% (11th)	—	no fix	2021-01-21	—
CVE-2021-0317US	high7.8OT elevated	0.21% (11th)	—	no fix	2021-01-11	—
CVE-2021-0342US	medium6.7	0.18% (7th)	—	no fix	2021-01-11	—
CVE-2021-0304US	medium5.5	0.18% (7th)	—	no fix	2021-01-11	—
CVE-2021-0307US	high7.8	0.18% (7th)	—	no fix	2021-01-11	—
CVE-2020-11235US	high7.8	0.17% (7th)	—	no fix	2021-06-09	—
CVE-2021-0310US	high7.8	0.17% (6th)	—	no fix	2021-01-11	—
CVE-2021-0309US	medium5.5	0.17% (6th)	—	no fix	2021-01-11	—
CVE-2021-0322US	medium5.0	0.17% (6th)	—	no fix	2021-01-11	—
CVE-2020-11260US	high8.4	0.17% (6th)	—	no fix	2021-06-09	—
CVE-2021-0301US	medium6.7	0.16% (6th)	—	no fix	2021-01-11	—
CVE-2020-11240US	high7.8	0.16% (5th)	—	no fix	2021-06-09	—
CVE-2021-0321US	medium5.5	0.16% (5th)	—	no fix	2021-01-11	—
CVE-2020-11160US	medium6.7	0.15% (4th)	—	no fix	2021-06-09	—
CVE-2020-11161US	high7.1	0.15% (4th)	—	no fix	2021-06-09	—
CVE-2019-9376US	medium5.5	0.13% (3rd)	—	no fix	2019-09-27	—
CVE-2020-11233US	high7.0	0.13% (3rd)	—	no fix	2021-06-09	—
CVE-2021-0303US	high7.0	0.12% (2nd)	—	no fix	2021-01-11	—
CVE-2020-11250US	high7.0	0.11% (1st)	—	no fix	2021-06-09	—
CVE-2021-0320US	medium4.7	0.11% (1st)	—	no fix	2021-01-11	—
CVE-2020-11262US	high7.0	0.10% (1st)	—	no fix	2021-06-09	—
CVE-2021-0323US	—	—	—	no fix	2025-01-17	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write9 CVEs
CWE-416Use After Free7 CVEs
CWE-125Out-of-bounds Read5 CVEs
CWE-190Integer Overflow or Wraparound4 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')4 CVEs
CWE-1021Improper Restriction of Rendered UI Layers or Frames2 CVEs
CWE-266Incorrect Privilege Assignment2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)44 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan