NVD disclosure day

Published threat advisories for April 5, 2024

CVE-2024-29748

Android Pixel Privilege Escalation Vulnerability.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A logic error in the code allows for local privilege escalation with user interaction. This affects organizations using the affected device software. The business risk involves unauthorized access and control of device functions.

NVD published: April 5, 2024 • CISA KEV

CVE advisoryKnown Exploit

CVE-2024-29745

Android Fastboot Information Disclosure Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

An information disclosure vulnerability in Google Android's fastboot firmware could allow attackers with local access to expose sensitive data. User interaction is not required for exploitation.

NVD published: April 5, 2024 • CISA KEV