New Update Android Security Update for November 2023 - Fixes 37 Vulnerabilities

[silversurfer]

Google on Monday announced patches for 37 vulnerabilities as part of the November 2023 Android security updates, with additional fixes released for Pixel devices.

The first part of the security update will arrive on devices as the 2023-11-01 security patch level, addressing 15 vulnerabilities in Android’s Framework and System components.

“The most severe of these issues is a critical security vulnerability in the System component that could lead to local information disclosure with no additional execution privileges needed,” Google notes in its advisory.

Source: 37 Vulnerabilities Patched in Android With November 2023 Security Updates - SecurityWeek

Android Security Bulletin—November 2023 | Android Open Source Project

source.android.com

 

[ForgottenSeer 103564]

Source: 37 Vulnerabilities Patched in Android With November 2023 Security Updates - SecurityWeek

Android Security Bulletin—November 2023 | Android Open Source Project

source.android.com

That's a pretty serious bug for sure effecting android 11-13

“The most severe of these issues is a critical security vulnerability in the System component that could lead to local information disclosure with no additional execution privileges needed,” Google notes in its advisory.

Of course the remaining vulnerabilities are nothing to scoff at...

In fact, all the remaining 14 vulnerabilities that the 2023-11-01 security patch level resolves are high-severity flaws. They could lead to elevation of privilege, information disclosure, and denial-of-service.

At some point figuring out that instead of rushing software enhancements and bringing more versatility to applications, those should be placed on hold until they patch all serious flaws in their software. I mean they are still patching issues from android 11.