Active exploitation of Google Pixel zero-days underway

Google has warned of ongoing attacks targeting a pair of high-severity zero-day vulnerabilities impacting its Pixel smartphones, including the bootloader information disclosure bug, tracked as CVE-2024-29745, and firmware privilege escalation flaw, tracked as CVE-2024-29748, reports The Hacker News.

application security attacks bootloader bug cve cve-2024 disclosure endpointdevice-security escalation exploitation firmware flaw google google pixel hacker high information information disclosure pixel privilege privilege escalation privilege escalation flaw reports severity smartphones targeting the hacker news vulnerabilities zero-day zero-days zero-day vulnerabilities