TLDR InfoSec · ATTACKS & VULNERABILITIES
GOOGLE FIXES ANDROID KERNEL ZERO-DAY EXPLOITED IN ATTACKS
Summary from the TLDR InfoSec newsletter
Google patched 48 vulnerabilities in February's Android security releases, including a new kernel zero-day under active exploitation. The kernel vulnerability was a privilege escalation vulnerability in the USB Video Class driver that could allow local, authenticated attackers to escalate privileges. The updates also include a fix for a critical vulnerability in Qualcomm's WLAN component.