Active Exploitation of High-Severity Zero-Day Vulnerability in Google Pixel

Google has released updates addressing a high severity vulnerability (CVE-2024-32896) affecting their Pixel products. The vulnerability is reportedly being actively exploited.

Successful exploitation of the vulnerability could allow an unauthorised attacker to perform privilege escalation.

The vulnerability affects all supported Pixel products.

Users of affected products are advised to update to the latest version immediately. To apply the security update, Pixel users should go to Settings > Security & Privacy > System & Updates > Security Update, tap Install, and restart the device to complete the update process.

More information is available here:
https://source.android.com/docs/security/bulletin/pixel/2024-06-01
https://thehackernews.com/2024/06/google-warns-of-pixel-firmware-security.html
https://www.bleepingcomputer.com/news/security/google-warns-of-actively-exploited-pixel-firmware-zero-day/