"37 Vulnerabilities Patched in Android With November 2023 Security Updates"

Google recently announced patches for 37 vulnerabilities as part of the November 2023 Android security updates, with additional fixes released for Pixel devices.  The first part of the security update addresses 15 vulnerabilities in Android's Framework and System components.  Google noted that the most severe of these issues is a critical security vulnerability in the System component that could lead to local information disclosure with no additional execution privileges needed.  The bug is tracked as CVE-2023-40113, impacts Android versions 11, 12, 12L, and 13, and was addressed alongside six other issues in the System component.  Google noted that the remaining 14 vulnerabilities in the first part of the security update resolved are high severity flaws.  They could lead to the elevation of privilege, information disclosure, and denial of service.  The second part of Android's November 2023 security update addresses 22 security defects in Arm, MediaTek, and Qualcomm components.  This week, the internet giant also announced patches for eight vulnerabilities in Pixel devices, including three affecting the Kernel and WLAN components and five in Qualcomm components.  Google makes no mention of any of these vulnerabilities being exploited. 

SecurityWeek reports: "37 Vulnerabilities Patched in Android With November 2023 Security Updates"