Google kills “critical” Android vulnerability with December security update،
It looks like Google is releasing its monthly updates again on the first Monday of every month. The November Android Security Update was released on the first Monday of November and today the December Security Update was released on the first Monday of December. It's unclear if
Google remains committed to the schedule, but we can tell you that today's release did not include an update for Pixel phones.
Before you
start yelling at our computer's QWERTY keys about how Google screwed up again, there's actually a good reason why the Pixel update wasn't released today. That's because the December Pixel Update will be a quarterly release of the platform, also called the Pixel Feature Drop, and Google would rather make a big deal out of it by releasing it on its own.
The update will bring many new features to eligible Pixel handsets. An upcoming feature for the Pixel 8
Pro is Video Boost which takes the video recorded by the phone, makes two copies and sends one via the cloud to Google where the latter's computational photography capabilities “boost” it. When the video is ready, you receive a notification and it is sent to your Google Photos library.
CVE-2023-40088 is a critical Android vulnerability that Google fixed with the December Android Security Update.
Today's security update includes a fix for CVE-2023-40088, one of 85 vulnerabilities fixed with today's update. Listed under the heading System vulnerabilities fixed by the update (16 system vulnerabilities were listed), this particular vulnerability is listed as RCE or remote code execution, and it could have been used by attackers to place their own code into a target phone's system without the phone user's knowledge or permission. It is unclear whether this vulnerability has been exploited in the past.
Google mentioned this particular flaw in the Android security bulletin, writing: “The most serious of these issues is a critical security vulnerability in the system component that could lead to unprivileged remote (proximal/adjacent) code execution.” additional execution required. no interaction is required for exploitation”, Google has classified this vulnerability as “critical”.
If you are waiting for the Pixel December feature to be discontinued, keep contacting us as it could happen at any time.
