Google Android 15

productDE

cpe:/o:google:android:15

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

EPSS ≥ 10%

by severity

3critical25high16medium7low

updated 2026-10-28

vulnerabilities (142)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-43047US	—OT critical	0.67% (52nd)	KEV	no fix	2024-10-07	—
CVE-2024-20154US	—	3.92% (90th)	Exploit	no fix	2025-01-06	—
CVE-2024-0044US	medium6.7	1.46% (73rd)	Exploit	no fix	2024-03-11	—
CVE-2023-40133US	medium5.5	0.18% (8th)	Exploit	no fix	2023-10-27	—
CVE-2024-38399US	high7.8	0.17% (6th)	Exploit	no fix	2024-10-07	—
CVE-2024-40676US	—	0.17% (6th)	Exploit	no fix	2025-01-28	—
CVE-2024-49746US	—	—	Exploit	no fix	2025-02-05	—
CVE-2025-20634US	critical9.8	0.77% (56th)	—	no fix	2025-02-03	—
CVE-2024-20094US	—	0.75% (55th)	—	no fix	2024-10-07	—
CVE-2024-45569US	—	0.58% (47th)	—	no fix	2025-02-03	—
CVE-2024-45558US	—	0.38% (32nd)	—	no fix	2025-01-06	—
CVE-2024-33069US	—	0.36% (29th)	—	no fix	2024-10-07	—
CVE-2024-20103US	—	0.33% (26th)	—	no fix	2024-10-07	—
CVE-2024-20100US	—	0.33% (26th)	—	no fix	2024-10-07	—
CVE-2024-33049US	high7.5	0.32% (25th)	—	no fix	2024-10-07	—
CVE-2024-20101US	—	0.32% (25th)	—	no fix	2024-10-07	—
CVE-2024-40675US	—	0.32% (25th)	—	no fix	2025-01-28	—
CVE-2024-49839US	critical9.8	0.29% (22nd)	—	no fix	2025-02-03	—
CVE-2023-40122US	low3.3	0.29% (21st)	—	no fix	2024-02-16	—
CVE-2024-40673US	—	0.29% (21st)	—	no fix	2025-01-28	—
CVE-2024-49734US	—	0.28% (21st)	—	no fix	2025-01-21	—
CVE-2024-33063US	—	0.26% (18th)	—	no fix	2024-12-02	—
CVE-2024-20148US	—	0.26% (17th)	—	no fix	2025-01-06	—
CVE-2024-38405US	medium6.5	0.25% (17th)	—	no fix	2024-11-04	—
CVE-2024-38403US	medium6.5	0.25% (17th)	—	no fix	2024-11-04	—
CVE-2024-23385US	medium6.5	0.25% (17th)	—	no fix	2024-11-04	—
CVE-2024-49749US	—	0.25% (17th)	—	no fix	2025-01-21	—
CVE-2024-38404US	—	0.25% (17th)	—	no fix	2025-02-03	—
CVE-2024-34722US	high8.8	0.25% (17th)	—	no fix	2024-07-09	—
CVE-2024-52935US	—	0.24% (15th)	—	no fix	2025-01-13	—
CVE-2024-40674US	—	0.21% (12th)	—	no fix	2025-01-28	—
CVE-2024-46973US	—	0.21% (12th)	—	no fix	2024-12-28	—
CVE-2024-43088US	high7.8OT elevated	0.18% (7th)	—	no fix	2024-11-13	—
CVE-2024-43704US	—	0.17% (7th)	—	no fix	2024-11-18	—
CVE-2024-21455US	—	0.17% (6th)	—	no fix	2024-10-07	—
CVE-2025-0015US	—	0.17% (6th)	—	no fix	2025-02-03	—
CVE-2024-38402US	—	0.16% (5th)	—	no fix	2024-09-02	—
CVE-2024-21464US	high7.8	0.15% (4th)	—	no fix	2025-01-06	—
CVE-2024-38408US	critical9.1	0.14% (4th)	—	no fix	2024-11-04	—
CVE-2024-43705US	—	0.14% (4th)	—	no fix	2024-12-28	—
CVE-2024-47892US	—	0.14% (3rd)	—	no fix	2024-12-13	—
CVE-2024-20146US	—	0.14% (3rd)	—	no fix	2025-01-06	—
CVE-2024-45553US	—	0.13% (3rd)	—	no fix	2025-01-06	—
CVE-2024-43701US	—	0.13% (3rd)	—	no fix	2024-10-14	—
CVE-2024-43080US	high7.8	0.12% (2nd)	—	no fix	2024-11-13	—
CVE-2024-23369US	—	0.12% (2nd)	—	no fix	2024-10-07	—
CVE-2024-40671US	high7.8OT elevated	0.12% (2nd)	—	no fix	2024-11-13	—
CVE-2024-0037US	low3.3OT elevated	0.11% (2nd)	—	no fix	2024-02-16	—
CVE-2024-40660US	high7.8OT elevated	0.11% (1st)	—	no fix	2024-11-13	—
CVE-2024-34719US	high7.8OT elevated	0.11% (1st)	—	no fix	2024-11-13	—

showing 50 of 142

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write28 CVEs
CWE-416Use After Free19 CVEs
CWE-20Improper Input Validation17 CVEs
CWE-276Incorrect Default Permissions13 CVEs
CWE-125Out-of-bounds Read10 CVEs
CWE-862Missing Authorization8 CVEs
CWE-126Buffer Over-read7 CVEs
CWE-129Improper Validation of Array Index7 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)142 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan