oneplus
Security Risk Profile
43
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 20 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 23, 2017 to present
20
Total CVEs
7
Critical+High
3
Exploited
7
Unpatched
Threat Assessment
Avg CVSS
7.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
7
Critical/High
Risk Level
43/100
medium
⚠️ 3 Active Exploits⚡ 1 Zero-Days
Severity Distribution
Critical
4High
3Medium
9Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
SQL Injection
1
2
Input Validation
1
3
Null Pointer Dereference
1
Most Affected Products
1. OnePlus OxygenOS24
2. Google Fast Pair2
3. Jabra Bluetooth audio accessories2
4. JBL Bluetooth audio accessories2
5. Logitech Bluetooth audio accessories2
Recent Vulnerabilities
See more →https://www.bleepingcomputer.com/news/security/critical-flaw-lets-hackers-track-eavesdrop-via-bluetooth-audio-devices/
unknown
Critical flaw lets hackers track, eavesdrop via Bluetooth audio devices
1/15/2026⚠ Exploited🔧 No Patch
https://www.bleepingcomputer.com/news/security/critical-whisperpair-flaw-lets-hackers-track-eavesdrop-via-bluetooth-audio-devices/
unknown
Critical WhisperPair flaw lets hackers track, eavesdrop via Bluetooth audio devices
1/15/2026⚠ Exploited🔧 No Patch
https://www.bleepingcomputer.com/news/security/unpatched-flaw-in-oneplus-phones-lets-rogue-apps-text-messages/
unknown
Unpatched flaw in OnePlus phones lets rogue apps text messages
9/24/2025⚠ Exploited⚡ Zero-Day🔧 No Patch
https://www.theregister.com/2025/09/23/rapid7_oneplus_android_bug/
unknown
Rapid7: OnePlus phones vulnerable to SMS theft since 2021
9/23/2025🔧 No Patch
CVE-2025-10184
CVSS 8.2high
OnePlus OxygenOS Telephony provider permission bypass
9/23/2025🔧 No Patch
CVE-2023-26309
CVSS 9.8critical
A remote code execution vulnerability in the webview component
8/10/2023🔧 No Patch
CVE-2020-13626
CVSS 4.6medium
10/9/2020🔧 No Patch
CVE-2020-7958
CVSS 6.0medium
4/14/2020🔧 No Patch
CVE-2017-5947
CVSS 6.8medium
3/29/2018🔧 No Patch
CVE-2017-11105
CVSS 10.0critical
8/3/2017🔧 No Patch
Monitor oneplus in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.