Google Android 14 <2025-12-05

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

EPSS ≥ 10%

by severity

1critical22high11medium0low

updated 2026-10-27

vulnerabilities (99)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-48633US	medium5.5OT critical	0.26% (18th)	KEV	no fix	2025-12-08	—
CVE-2025-48572US	—OT critical	0.26% (18th)	KEV	no fix	2025-12-08	—
CVE-2025-8045US	—	0.18% (7th)	Exploit	no fix	2025-12-01	—
CVE-2023-40130US	high7.8	0.11% (1st)	Exploit	no fix	2023-10-27	—
CVE-2025-20730US	—	0.08% (0th)	Exploit	no fix	2025-11-04	—
CVE-2025-31718US	—	1.02% (63rd)	—	no fix	2025-10-11	—
CVE-2025-31717US	—	0.64% (50th)	—	no fix	2025-10-11	—
CVE-2025-20727US	—	0.56% (47th)	—	no fix	2025-11-04	—
CVE-2025-20725US	—	0.54% (45th)	—	no fix	2025-11-04	—
CVE-2025-20726US	—	0.51% (44th)	—	no fix	2025-11-04	—
CVE-2025-20758US	—	0.51% (43rd)	—	no fix	2025-12-02	—
CVE-2025-20754US	—	0.49% (42nd)	—	no fix	2025-12-02	—
CVE-2025-20753US	—	0.49% (42nd)	—	no fix	2025-12-02	—
CVE-2025-20759US	—	0.48% (41st)	—	no fix	2025-12-02	—
CVE-2025-48631US	medium6.5	0.47% (40th)	—	no fix	2025-12-08	—
CVE-2025-6573US	—	0.44% (38th)	—	no fix	2025-08-09	—
CVE-2025-20790US	—	0.40% (34th)	—	no fix	2025-12-02	—
CVE-2025-48626US	critical9.8	0.38% (32nd)	—	no fix	2025-12-08	—
CVE-2025-20792US	—	0.37% (30th)	—	no fix	2025-12-02	—
CVE-2025-20755US	—	0.37% (30th)	—	no fix	2025-12-02	—
CVE-2025-3012US	—	0.36% (29th)	—	no fix	2025-12-01	—
CVE-2025-48592US	high7.5	0.35% (28th)	—	no fix	2025-12-08	—
CVE-2025-58410US	—	0.30% (22nd)	—	no fix	2025-11-17	—
CVE-2025-61619US	—	0.26% (17th)	—	no fix	2025-12-01	—
CVE-2025-61618US	—	0.26% (17th)	—	no fix	2025-12-01	—
CVE-2025-61617US	—	0.26% (17th)	—	no fix	2025-12-01	—
CVE-2025-61610US	—	0.26% (17th)	—	no fix	2025-12-01	—
CVE-2025-61609US	—	0.26% (17th)	—	no fix	2025-12-01	—
CVE-2025-61608US	—	0.26% (17th)	—	no fix	2025-12-01	—
CVE-2025-61607US	—	0.26% (17th)	—	no fix	2025-12-01	—
CVE-2025-11133US	—	0.26% (17th)	—	no fix	2025-12-01	—
CVE-2025-11132US	—	0.26% (17th)	—	no fix	2025-12-01	—
CVE-2025-11131US	—	0.26% (17th)	—	no fix	2025-12-01	—
CVE-2025-20757US	—	0.25% (16th)	—	no fix	2025-12-02	—
CVE-2025-20756US	—	0.25% (16th)	—	no fix	2025-12-02	—
CVE-2025-20750US	—	0.25% (16th)	—	no fix	2025-12-02	—
CVE-2025-20791US	—	0.24% (16th)	—	no fix	2025-12-02	—
CVE-2025-20752US	—	0.24% (16th)	—	no fix	2025-12-02	—
CVE-2025-20751US	—	0.24% (16th)	—	no fix	2025-12-02	—
CVE-2025-48600US	medium5.5OT elevated	0.18% (7th)	—	no fix	2025-12-08	—
CVE-2025-6349US	—	0.16% (6th)	—	no fix	2025-12-01	—
CVE-2025-38500US	high7.8	0.16% (5th)	—	no fix	2025-08-12	—
CVE-2025-48618US	medium6.8	0.15% (4th)	—	no fix	2025-12-08	—
CVE-2025-25177US	—	0.14% (3rd)	—	no fix	2025-09-22	—
CVE-2025-48621US	high7.3OT elevated	0.13% (3rd)	—	no fix	2025-12-08	—
CVE-2025-46711US	—	0.13% (2nd)	—	no fix	2025-09-22	—
CVE-2025-48580US	—	0.13% (2nd)	—	no fix	2025-12-08	—
CVE-2025-47370US	—	0.12% (2nd)	—	no fix	2025-11-04	—
CVE-2025-48598US	medium6.6	0.11% (1st)	—	no fix	2025-12-08	—
CVE-2025-47372US	high8.4	0.11% (1st)	—	no fix	2025-12-18	—

showing 50 of 99

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation34 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor17 CVEs
CWE-787Out-of-bounds Write10 CVEs
CWE-400Uncontrolled Resource Consumption7 CVEs
CWE-862Missing Authorization7 CVEs
CWE-441Unintended Proxy or Intermediary ('Confused Deputy')6 CVEs
CWE-476NULL Pointer Dereference6 CVEs
CWE-416Use After Free5 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)99 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan