Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Android December 2022 security updates
#1
Information 
Quote:Android December 2022 security updates fix 81 vulnerabilities

Google has released the December 2022 security update for Android, fixing four critical-severity vulnerabilities, including a remote code execution flaw exploitable via Bluetooth.

This month’s update addresses 45 vulnerabilities in core Android components with patch level 2022-12-01, and another 36 vulnerabilities impacting third-party components addressed in patch level 2022-12-05.

“The most severe of these issues is a critical security vulnerability in the System component that could lead to remote code execution over Bluetooth with no additional execution privileges needed,” mentions the security bulletin.
The four critical-severity vulnerabilities addressed in this month’s update are:
  • CVE-2022-20472 – Remote code execution flaw in Android Framework, impacting Android versions 10 to 13.
  • CVE-2022-20473 – Remote code execution flaw in Android Framework, impacting Android versions 10 to 13.
  • CVE-2022-20411 – Remote code execution flaw in Android System, impacting Android versions 10 to 13.
  • CVE-2022-20498 – Information disclosure flaw in Android System, impacting Android versions 10 to 13.
The rest of the fixed vulnerabilities involve elevation of privileges (EoP), remote code execution, information disclosure, and denial of service problems.

The high-severity EoP flaws are typically exploited by malware sneaking into a device via a low-privilege pathway, such as installing malicious software masquerading as an innocuous app.

That said, applying the available update as soon as it becomes available for your device is crucial, even if none of the flaws are currently reported as actively exploited.
[-] The following 1 user says Thank You to harlan4096 for this post:
  • ismail
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)
[-]
Welcome
You have to register before you can post on our site.

Username/Email:


Password:





[-]
Recent Posts
Avast Antivirus 23.1.7883
Avast Antivirus 23...harlan4096 — 09:44
AVG Anti-Virus / Internet Security 23.1....
AVG Anti-Virus / I...harlan4096 — 09:43
Macrium Reflect 8.1.7367
Macrium Reflect 8....harlan4096 — 09:39
K-Lite Codec Pack 17.4.1 / 17.4.3 Update
Changes in 17.4.3 ...harlan4096 — 09:37
Google Chrome 110.0.5481.78
Google Chrome 110....harlan4096 — 09:33

[-]
Birthdays
Today's Birthdays
avatar (46)tsorenHievy
Upcoming Birthdays
avatar (44)hapedDow
avatar (43)komriwat
avatar (35)showercurtains
avatar (46)PeterWhink
avatar (47)neuthrusBub
avatar (43)myhotseeve
avatar (43)Edwinmub
avatar (43)dimaWeami
avatar (38)svoyaEnuct
avatar (36)TranoTymn
avatar (36)MezirLal
avatar (47)listfquoto
avatar (43)dima6sarPrave
avatar (35)Michaelaburi
avatar (43)dpascoal
avatar (48)Ronaldduh
avatar (36)legalgauch
avatar (41)Baihu

[-]
Online Staff
There are no staff members currently online.

>