Google fixes actively exploited Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2021-0889+2 related CVEs | In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow | 9.8 group max | 2% | ||
| CVE-2021-1048 | Use-After-Free Privilege Escalation in Android Kernel (CVE-2021-1048) | 7.8 | 1% | KEV | KEV |
CVE-2021-1975+1 related CVE | Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… | 9.8 group max | <1% |
From the original article
1 min read at securityaffairs.com
Google’s Android November 2021 security updates address a zero-day vulnerability in the Kernel that is actively exploited in the wild. Google’s Android November 2021 security updates addressed 18 vulnerabilities in the framework and system components and 18 issues in the kernel and vendor components.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.