Google has patched 62 vulnerabilities in Android, including two zero-days that are actively being exploited in attacks, tracked as CVE-2024-53197 and CVE-2024-53150.
CVE-2024-53197 is a privilege escalation flaw found in the USB audio sub-component of the Linux Kernel. Local attackers are able to exploit the bug to access sensitive information on devices without any user interaction.
It does not yet have a CVSS rating, but according to researchers at Malwarebytes Labs, this was the link between two other vulnerabilities — CVE-2024-50302 and CVE-2024-53104 — which enabled law enforcement in Serbia to unlock a student activist’s device using Cellebrite forensic tools, before attempting to install spyware.
Gratis är gott: Skapa vinterstämning i din Mac med Let it Snow
Mjukt snöfall skapar en festlig stämning med ett klick och som stöder ett stort antal bildskärmar. Let It Snow lägger till vackert animerat, realistiskt snöfall på ditt skrivbord samtidigt som din Mac förblir snabb, tyst och responsiv. Appen fungerar med…
