Patch days / May 2024

Android Security Bulletin — May 2024

Monday, 6 May 2024

Vulnerabilities: 16
Critical: 2
High: 8
Zero-days: 0
Public exploit: 2

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Critical 2

Critical 9.8
CVE-2024-23708 Public exploit In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a clipboard message has been accessed. This …
Critical 9.8
CVE-2024-23705 In multiple locations, there is a possible failure to persist or enforce user restrictions due to improper input validation. This could lead to local escalatio…

Public exploit code 1

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

Medium 6.5
CVE-2024-23709 Public exploit In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no addition…

All vulnerabilities 16

Critical2 Show

High8 Show

Medium6 Show