"37 Vulnerabilities Patched in Android"

Google recently started rolling out the June 2024 set of monthly security updates for Android, with patches for 37 vulnerabilities, including multiple high-severity elevation of privilege bugs.  The first part of this month's security update, which arrives on devices as the "2024-06-01 security patch level", resolves 19 flaws in the Framework and System components.  Google noted that the most severe of these issues is a high-severity vulnerability in the System component that could lead to local escalation of privilege with no additional execution privileges needed.  A total of seven security defects were addressed in the System component this month, all leading to elevation of privilege.  Google noted that of the 12 issues resolved in Framework, ten are elevation of privilege bugs, one leads to information disclosure, and one to denial of service.  The second part of the update arrives on devices as the "2024-06-05 security patch level" and addresses an additional 18 vulnerabilities in Kernel, Imagination Technologies, Arm, MediaTek, and Qualcomm components.  Three of the Qualcomm-specific flaws are critical.  Devices running a security patch level of 2024-06-05 contain fixes for all these bugs and security defects addressed with previous patch levels.

SecurityWeek reports: "37 Vulnerabilities Patched in Android"