> What percentage of those will actually be exploited in the hands of typical users? There's not exactly worm grade exploits flying around for these devices. T

> What percentage of those will actually be exploited in the hands of typical users? There's not exactly worm grade exploits flying around for these devices. There have been large set of attacks against modems and media decoders that do not require any kind of app installation. iMessage is a constant source of iOS CVEs. Media codecs are a constant source of headaches in the Android world as well and they require a driver update to fix (since most of them are HW decoders). Pretty much all of the big security issues in the last year required no user interaction on Android or iOS to exploit.