Google Releases Android Update to Patch Two Actively Exploited Vulnerabilities

Summary: Google has released patches for 62 vulnerabilities, including two high-severity flaws related to the USB sub-component of the Kernel that have been actively exploited. The vulnerabilities, identified as CVE-2024-53150 and CVE-2024-53197, pose significant security risks, including potential privilege escalation. Users of Android devices are recommended to apply updates from original equipment manufacturers to mitigate these threats.

Affected: Android devices

Keypoints :

• Google issued patches for 62 vulnerabilities, with two being exploited in the wild.
• CVE-2024-53150 and CVE-2024-53197 both have a CVSS score of 7.8, highlighting their severity.
• The vulnerabilities have been connected to targeted exploitation against a Serbian youth activist’s Android phone.
• Users are urged to update their devices promptly when OEMs release the fixes.