Connect with us

Hi, what are you looking for?


Mobile & Wireless

37 Vulnerabilities Patched in Android With November 2023 Security Updates

The Android security updates released this week resolve 37 vulnerabilities, including a critical information disclosure bug.

Android security updates

Google on Monday announced patches for 37 vulnerabilities as part of the November 2023 Android security updates, with additional fixes released for Pixel devices.

The first part of the security update will arrive on devices as the 2023-11-01 security patch level, addressing 15 vulnerabilities in Android’s Framework and System components.

“The most severe of these issues is a critical security vulnerability in the System component that could lead to local information disclosure with no additional execution privileges needed,” Google notes in its advisory.

The bug is tracked as CVE-2023-40113, impacts Android versions 11, 12, 12L, and 13, and was addressed alongside six other issues in the System component, which are rated ‘high severity’.

In fact, all the remaining 14 vulnerabilities that the 2023-11-01 security patch level resolves are high-severity flaws. They could lead to elevation of privilege, information disclosure, and denial-of-service.

The second part of Android’s November 2023 security update arrives on devices as the 2023-11-05 security patch level and addresses 22 security defects in Arm, MediaTek, and Qualcomm components.

Devices running a security patch level of 2023-10-05 contain patches for all the issues described in Android’s November 2023 and previous security bulletins.

Advertisement. Scroll to continue reading.

Additionally, Google has announced kernel version updates for Android 11 to 13.

This week, the internet giant also announced patches for eight vulnerabilities in Pixel devices, including three affecting the Kernel and WLAN components and five in Qualcomm components.

On Pixel devices, a security patch level of 2023-11-01 or later resolves these seven flaws along with all the bugs the November 2023 Android security updates resolve.

While no separate patches have been released for Wear OS and Automotive OS this month, updates released this week address all the bugs resolved with the Android security patch level of 2023-10-05 or later.

Google makes no mention of any of these vulnerabilities being exploited in malicious attacks.

Related: Android’s October 2023 Security Updates Patch Two Exploited Vulnerabilities

Related: Android Zero-Day Patched With September 2023 Security Updates

Related: 40 Vulnerabilities Patched in Android With August 2023 Security Updates

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join us as we delve into the transformative potential of AI, predictive ChatGPT-like tools and automation to detect and defend against cyberattacks.


As cybersecurity breaches and incidents escalate, the cyber insurance ecosystem is undergoing rapid and transformational change.


Expert Insights

Related Content

Mobile & Wireless

Infonetics Research has shared excerpts from its Mobile Device Security Client Software market size and forecasts report, which tracks enterprise and consumer security client...

Mobile & Wireless

Apple rolled out iOS 16.3 and macOS Ventura 13.2 to cover serious security vulnerabilities.

Mobile & Wireless

Critical security flaws expose Samsung’s Exynos modems to “Internet-to-baseband remote code execution” attacks with no user interaction. Project Zero says an attacker only needs...

Mobile & Wireless

Samsung smartphone users warned about CVE-2023-21492, an ASLR bypass vulnerability exploited in the wild, likely by a spyware vendor.

Mobile & Wireless

Two vulnerabilities in Samsung’s Galaxy Store that could be exploited to install applications or execute JavaScript code by launching a web page.

Malware & Threats

Apple’s cat-and-mouse struggles with zero-day exploits on its flagship iOS platform is showing no signs of slowing down.

Mobile & Wireless

Asus patched nine WiFi router security defects, including a highly critical 2018 vulnerability that exposes users to code execution attacks.

Mobile & Wireless

Technical details published for an Arm Mali GPU flaw leading to arbitrary kernel code execution and root on Pixel 6.