Pixel
Vendor:
First CVE: Oct 16, 2017 · Active for 8 years
7
Total CVEs
More Total CVEs than 83% of tracked products
2.3
Avg CVEs / Year
Higher CVE frequency than 73% of tracked products
6.7
Avg CVSS
Higher Avg CVSS than 36% of tracked products
14.3%
KEV Rate
Higher KEV Rate than 98% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Pixel over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 16, 2017
8 years ago
Most Recent CVE
Oct 25, 2024
637 days ago
CVE Severity & Scoring
Pixel7 CVEs
43%
57%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local3 (42.9%)
Network4 (57.1%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low6 (85.7%)
High1 (14.3%)
Unknown0 (0.0%)
User Interaction
None6 (85.7%)
Unknown0 (0.0%)
Required1 (14.3%)
Privileges Required
Low2 (28.6%)
High0 (0.0%)
None5 (71.4%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-29748HIGH there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti | Apr 5, 2024 | 7.8 | 65 | YES | NO |
CVE-2017-15361MEDIUM The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 00 | Oct 16, 2017 | 5.9 | 26 | NO | NO |
CVE-2024-44100HIGH Android before 2024-10-05 on Google Pixel devices allows information disclosure in the modem component, A-299774545. | Oct 25, 2024 | 7.5 | 22 | NO | NO |
CVE-2024-47022HIGH Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-331255656. | Oct 25, 2024 | 7.5 | 21 | NO | NO |
CVE-2024-47020HIGH Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488. | Oct 25, 2024 | 7.5 | 21 | NO | NO |
CVE-2016-5346MEDIUM An Information Disclosure vulnerability exists in the Google Pixel/Pixel SL Qualcomm Avtimer Driver due to a NULL pointer dereference when processing an accept system call by the u | Jan 8, 2020 | 5.5 | 21 | NO | NO |
CVE-2023-4164MEDIUM There is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of health data with no additional execution privileges | Jan 2, 2024 | 5.5 | 18 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
1 CVE
14.3% of CVEs· 98th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Pixel
Top CWEs
Versions
No cataloged versions.