Домой United States USA — software Google rolls out huge security update to Pixel phones, squashing 50 vulnerabilities

Google rolls out huge security update to Pixel phones, squashing 50 vulnerabilities

141
0
ПОДЕЛИТЬСЯ

One flaw could’ve given hackers total access to your phone
June 2024 has been a big month for Pixel smartphones. Not only did Gemini Nano roll out to the Pixel 8a, but Google also released a huge security update to multiple models.
It addresses 50 vulnerabilities, ranging in severity from moderate to critical. One of the more insidious flaws is CVE-2024-32896, which Tom’s Guide states “is an elevation of privilege (EoP) vulnerability.”
An EoP refers to a bug or design flaw that a bad actor can exploit to gain unfettered access to a smartphone’s resources. It’s a level of access that not even a Pixel owner normally has. Even though it’s not as severe as the others, CVE-2024-32896 did warrant an extra warning from Google on the patch’s Pixel Update Bulletin page, stating it “may be under limited, targeted exploitation.”
In other words, it’s likely bad actors are going to be targeting the flaw to infiltrate a Pixel phone, so it’s important that you install the patch.

Continue reading...