"94 Vulnerabilities Patched in Android With December 2023 Security Updates"

Google recently announced that the December 2023 Android security updates deliver patches for 94 vulnerabilities.  The first part of the updates resolves 33 vulnerabilities in Android's Framework and System components.  Google noted that three of these are rated "critical severity." Google stated that the most severe of these issues is a critical security vulnerability in the system component that could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed.  Tracked as CVE-2023-40088, the RCE flaw impacts Android 11, 12, 12L, 13, and 14 and does not require user interaction for successful exploitation.  Google noted that the latest Android update resolves 15 other issues in the System component, namely 10 elevation of privilege issues and five information disclosure bugs.  All are rated "high severity."  The update also patches 17 vulnerabilities in the Framework component, including two critical bugs leading to elevation of privilege and information disclosure.  A total of 61 issues were resolved with the second part of this month's Android updates, including two critical severity flaws.  The bugs impact System, Arm, Imagination Technologies, MediaTek, Misc OEM, Unisoc, and Qualcomm components.

SecurityWeek reports: "94 Vulnerabilities Patched in Android With December 2023 Security Updates"