{"schema_version":"2","view":"grouped","data":[{"id":2625,"cve_ids":["CVE-2021-39793"],"payload":{"kind":"advisory","title":"Google Pixel Out-of-Bounds Write Vulnerability","summary":"Google Pixel contains a possible out-of-bounds write due to a logic error in the code that could lead to local escalation of privilege. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-39793","products":[{"name":{"value":"Pixel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-39793","aliases":["CVE-2021-39793"],"affected":[],"modified":"2022-04-11T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2021-39793","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-39793","dueDate":"2022-05-02","product":"Pixel","dateAdded":"2022-04-11","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Pixel contains a possible out-of-bounds write due to a logic error in the code that could lead to local escalation of privilege.","vulnerabilityName":"Google Pixel Out-of-Bounds Write Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-39793","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ea0400e9-e57e-4e27-b0db-d4308ee10458","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-39793","advisory_id":"ea0400e9-e57e-4e27-b0db-d4308ee10458","event_types":["advisory"],"published_at":"2026-10-24T21:21:58.965872+00:00","technologies":["core-kev","pixel"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-11T00:00:00+00:00","detail_url":"/advisories/advisory%3Aea0400e9-e57e-4e27-b0db-d4308ee10458","group":{"id":"advisory:ea0400e9-e57e-4e27-b0db-d4308ee10458","revision":1,"primary_event_id":2635,"change":"published","superseded_by":[],"changed":{"id":2635,"cve_ids":["CVE-2021-39793"],"payload":{"kind":"advisory","title":"Google Pixel Out-of-Bounds Write Vulnerability","summary":"Google Pixel contains a possible out-of-bounds write due to a logic error in the code that could lead to local escalation of privilege. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-39793","products":[{"name":{"value":"Pixel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-39793","aliases":["CVE-2021-39793"],"affected":[],"modified":"2022-04-11T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2021-39793","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-39793","dueDate":"2022-05-02","product":"Pixel","dateAdded":"2022-04-11","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Pixel contains a possible out-of-bounds write due to a logic error in the code that could lead to local escalation of privilege.","vulnerabilityName":"Google Pixel Out-of-Bounds Write Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-39793","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ea0400e9-e57e-4e27-b0db-d4308ee10458","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-39793","advisory_id":"ea0400e9-e57e-4e27-b0db-d4308ee10458","event_types":["advisory"],"published_at":"2026-10-24T21:21:58.965872+00:00","technologies":["core-kev","pixel"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-11T00:00:00+00:00","detail_url":"/events/2635"},"members":[{"id":2635,"cve_ids":["CVE-2021-39793"],"payload":{"kind":"advisory","title":"Google Pixel Out-of-Bounds Write Vulnerability","summary":"Google Pixel contains a possible out-of-bounds write due to a logic error in the code that could lead to local escalation of privilege. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-39793","products":[{"name":{"value":"Pixel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-39793","aliases":["CVE-2021-39793"],"affected":[],"modified":"2022-04-11T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2021-39793","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-39793","dueDate":"2022-05-02","product":"Pixel","dateAdded":"2022-04-11","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Pixel contains a possible out-of-bounds write due to a logic error in the code that could lead to local escalation of privilege.","vulnerabilityName":"Google Pixel Out-of-Bounds Write Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-39793","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ea0400e9-e57e-4e27-b0db-d4308ee10458","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-39793","advisory_id":"ea0400e9-e57e-4e27-b0db-d4308ee10458","event_types":["advisory"],"published_at":"2026-10-24T21:21:58.965872+00:00","technologies":["core-kev","pixel"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-11T00:00:00+00:00","detail_url":"/events/2635"}]}},{"id":1179,"cve_ids":["CVE-2023-21237"],"payload":{"kind":"advisory","title":"Android Pixel Information Disclosure Vulnerability","summary":"Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2023-21237","products":[{"name":{"value":"Pixel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-21237","aliases":["CVE-2023-21237"],"affected":[],"modified":"2024-03-05T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-200"],"cveID":"CVE-2023-21237","notes":"https://source.android.com/docs/security/bulletin/pixel/2023-06-01;  https://nvd.nist.gov/vuln/detail/CVE-2023-21237","dueDate":"2024-03-26","product":"Pixel","dateAdded":"2024-03-05","vendorProject":"Android","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information.","vulnerabilityName":"Android Pixel Information Disclosure Vulnerability ","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2023-21237","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:514882e2-9c92-4d11-9e25-3425039c304c","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21237","advisory_id":"514882e2-9c92-4d11-9e25-3425039c304c","event_types":["advisory"],"published_at":"2026-10-24T20:57:16.525192+00:00","technologies":["core-kev","pixel"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-03-05T00:00:00+00:00","detail_url":"/advisories/advisory%3A514882e2-9c92-4d11-9e25-3425039c304c","group":{"id":"advisory:514882e2-9c92-4d11-9e25-3425039c304c","revision":1,"primary_event_id":1170,"change":"published","superseded_by":[],"changed":{"id":1170,"cve_ids":["CVE-2023-21237"],"payload":{"kind":"advisory","title":"Android Pixel Information Disclosure Vulnerability","summary":"Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2023-21237","products":[{"name":{"value":"Pixel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-21237","aliases":["CVE-2023-21237"],"affected":[],"modified":"2024-03-05T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-200"],"cveID":"CVE-2023-21237","notes":"https://source.android.com/docs/security/bulletin/pixel/2023-06-01;  https://nvd.nist.gov/vuln/detail/CVE-2023-21237","dueDate":"2024-03-26","product":"Pixel","dateAdded":"2024-03-05","vendorProject":"Android","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information.","vulnerabilityName":"Android Pixel Information Disclosure Vulnerability ","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2023-21237","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:514882e2-9c92-4d11-9e25-3425039c304c","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21237","advisory_id":"514882e2-9c92-4d11-9e25-3425039c304c","event_types":["advisory"],"published_at":"2026-10-24T20:57:16.525192+00:00","technologies":["core-kev","pixel"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-03-05T00:00:00+00:00","detail_url":"/events/1170"},"members":[{"id":1170,"cve_ids":["CVE-2023-21237"],"payload":{"kind":"advisory","title":"Android Pixel Information Disclosure Vulnerability","summary":"Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2023-21237","products":[{"name":{"value":"Pixel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-21237","aliases":["CVE-2023-21237"],"affected":[],"modified":"2024-03-05T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-200"],"cveID":"CVE-2023-21237","notes":"https://source.android.com/docs/security/bulletin/pixel/2023-06-01;  https://nvd.nist.gov/vuln/detail/CVE-2023-21237","dueDate":"2024-03-26","product":"Pixel","dateAdded":"2024-03-05","vendorProject":"Android","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information.","vulnerabilityName":"Android Pixel Information Disclosure Vulnerability ","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2023-21237","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:514882e2-9c92-4d11-9e25-3425039c304c","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21237","advisory_id":"514882e2-9c92-4d11-9e25-3425039c304c","event_types":["advisory"],"published_at":"2026-10-24T20:57:16.525192+00:00","technologies":["core-kev","pixel"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-03-05T00:00:00+00:00","detail_url":"/events/1170"}]}},{"id":1171,"cve_ids":["CVE-2024-29745"],"payload":{"kind":"advisory","title":"Android Pixel Information Disclosure Vulnerability","summary":"Android Pixel contains an information disclosure vulnerability in the fastboot firmware used to support unlocking, flashing, and locking affected devices. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-29745","products":[{"name":{"value":"Pixel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-29745","aliases":["CVE-2024-29745"],"affected":[],"modified":"2024-04-04T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-908"],"cveID":"CVE-2024-29745","notes":"https://source.android.com/docs/security/bulletin/pixel/2024-04-01 ; https://nvd.nist.gov/vuln/detail/CVE-2024-29745","dueDate":"2024-04-25","product":"Pixel","dateAdded":"2024-04-04","vendorProject":"Android","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Android Pixel contains an information disclosure vulnerability in the fastboot firmware used to support unlocking, flashing, and locking affected devices.","vulnerabilityName":"Android Pixel Information Disclosure Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-29745","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:dccdfaa6-5ebb-42e3-862c-a924753c1810","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745","advisory_id":"dccdfaa6-5ebb-42e3-862c-a924753c1810","event_types":["advisory"],"published_at":"2026-10-24T20:57:11.299706+00:00","technologies":["core-kev","pixel"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-04-04T00:00:00+00:00","detail_url":"/advisories/advisory%3Adccdfaa6-5ebb-42e3-862c-a924753c1810","group":{"id":"advisory:dccdfaa6-5ebb-42e3-862c-a924753c1810","revision":1,"primary_event_id":1162,"change":"published","superseded_by":[],"changed":{"id":1162,"cve_ids":["CVE-2024-29745"],"payload":{"kind":"advisory","title":"Android Pixel Information Disclosure Vulnerability","summary":"Android Pixel contains an information disclosure vulnerability in the fastboot firmware used to support unlocking, flashing, and locking affected devices. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-29745","products":[{"name":{"value":"Pixel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-29745","aliases":["CVE-2024-29745"],"affected":[],"modified":"2024-04-04T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-908"],"cveID":"CVE-2024-29745","notes":"https://source.android.com/docs/security/bulletin/pixel/2024-04-01 ; https://nvd.nist.gov/vuln/detail/CVE-2024-29745","dueDate":"2024-04-25","product":"Pixel","dateAdded":"2024-04-04","vendorProject":"Android","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Android Pixel contains an information disclosure vulnerability in the fastboot firmware used to support unlocking, flashing, and locking affected devices.","vulnerabilityName":"Android Pixel Information Disclosure Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-29745","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:dccdfaa6-5ebb-42e3-862c-a924753c1810","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745","advisory_id":"dccdfaa6-5ebb-42e3-862c-a924753c1810","event_types":["advisory"],"published_at":"2026-10-24T20:57:11.299706+00:00","technologies":["core-kev","pixel"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-04-04T00:00:00+00:00","detail_url":"/events/1162"},"members":[{"id":1162,"cve_ids":["CVE-2024-29745"],"payload":{"kind":"advisory","title":"Android Pixel Information Disclosure Vulnerability","summary":"Android Pixel contains an information disclosure vulnerability in the fastboot firmware used to support unlocking, flashing, and locking affected devices. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-29745","products":[{"name":{"value":"Pixel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-29745","aliases":["CVE-2024-29745"],"affected":[],"modified":"2024-04-04T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-908"],"cveID":"CVE-2024-29745","notes":"https://source.android.com/docs/security/bulletin/pixel/2024-04-01 ; https://nvd.nist.gov/vuln/detail/CVE-2024-29745","dueDate":"2024-04-25","product":"Pixel","dateAdded":"2024-04-04","vendorProject":"Android","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Android Pixel contains an information disclosure vulnerability in the fastboot firmware used to support unlocking, flashing, and locking affected devices.","vulnerabilityName":"Android Pixel Information Disclosure Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-29745","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:dccdfaa6-5ebb-42e3-862c-a924753c1810","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745","advisory_id":"dccdfaa6-5ebb-42e3-862c-a924753c1810","event_types":["advisory"],"published_at":"2026-10-24T20:57:11.299706+00:00","technologies":["core-kev","pixel"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-04-04T00:00:00+00:00","detail_url":"/events/1162"}]}},{"id":1170,"cve_ids":["CVE-2024-29748"],"payload":{"kind":"advisory","title":"Android Pixel Privilege Escalation Vulnerability","summary":"Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin app. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-29748","products":[{"name":{"value":"Pixel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-29748","aliases":["CVE-2024-29748"],"affected":[],"modified":"2024-04-04T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-280"],"cveID":"CVE-2024-29748","notes":"https://source.android.com/docs/security/bulletin/pixel/2024-04-01; https://nvd.nist.gov/vuln/detail/CVE-2024-29748","dueDate":"2024-04-25","product":"Pixel","dateAdded":"2024-04-04","vendorProject":"Android","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin app.","vulnerabilityName":"Android Pixel Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-29748","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f8e2ca14-9762-406f-8b3a-2fb2c3629620","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29748","advisory_id":"f8e2ca14-9762-406f-8b3a-2fb2c3629620","event_types":["advisory"],"published_at":"2026-10-24T20:57:10.519892+00:00","technologies":["core-kev","pixel"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-04-04T00:00:00+00:00","detail_url":"/advisories/advisory%3Af8e2ca14-9762-406f-8b3a-2fb2c3629620","group":{"id":"advisory:f8e2ca14-9762-406f-8b3a-2fb2c3629620","revision":1,"primary_event_id":1161,"change":"published","superseded_by":[],"changed":{"id":1161,"cve_ids":["CVE-2024-29748"],"payload":{"kind":"advisory","title":"Android Pixel Privilege Escalation Vulnerability","summary":"Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin app. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-29748","products":[{"name":{"value":"Pixel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-29748","aliases":["CVE-2024-29748"],"affected":[],"modified":"2024-04-04T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-280"],"cveID":"CVE-2024-29748","notes":"https://source.android.com/docs/security/bulletin/pixel/2024-04-01; https://nvd.nist.gov/vuln/detail/CVE-2024-29748","dueDate":"2024-04-25","product":"Pixel","dateAdded":"2024-04-04","vendorProject":"Android","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin app.","vulnerabilityName":"Android Pixel Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-29748","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f8e2ca14-9762-406f-8b3a-2fb2c3629620","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29748","advisory_id":"f8e2ca14-9762-406f-8b3a-2fb2c3629620","event_types":["advisory"],"published_at":"2026-10-24T20:57:10.519892+00:00","technologies":["core-kev","pixel"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-04-04T00:00:00+00:00","detail_url":"/events/1161"},"members":[{"id":1161,"cve_ids":["CVE-2024-29748"],"payload":{"kind":"advisory","title":"Android Pixel Privilege Escalation Vulnerability","summary":"Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin app. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-29748","products":[{"name":{"value":"Pixel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-29748","aliases":["CVE-2024-29748"],"affected":[],"modified":"2024-04-04T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-280"],"cveID":"CVE-2024-29748","notes":"https://source.android.com/docs/security/bulletin/pixel/2024-04-01; https://nvd.nist.gov/vuln/detail/CVE-2024-29748","dueDate":"2024-04-25","product":"Pixel","dateAdded":"2024-04-04","vendorProject":"Android","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin app.","vulnerabilityName":"Android Pixel Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-29748","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f8e2ca14-9762-406f-8b3a-2fb2c3629620","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29748","advisory_id":"f8e2ca14-9762-406f-8b3a-2fb2c3629620","event_types":["advisory"],"published_at":"2026-10-24T20:57:10.519892+00:00","technologies":["core-kev","pixel"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-04-04T00:00:00+00:00","detail_url":"/events/1161"}]}},{"id":1143,"cve_ids":["CVE-2024-32896"],"payload":{"kind":"advisory","title":"Android Pixel Privilege Escalation Vulnerability","summary":"Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-32896","products":[{"name":{"value":"Pixel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-32896","aliases":["CVE-2024-32896"],"affected":[],"modified":"2024-06-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-783"],"cveID":"CVE-2024-32896","notes":"https://source.android.com/docs/security/bulletin/pixel/2024-06-01; https://nvd.nist.gov/vuln/detail/CVE-2024-32896","dueDate":"2024-07-04","product":"Pixel","dateAdded":"2024-06-13","vendorProject":"Android","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation.","vulnerabilityName":"Android Pixel Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-32896","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:aa6dc9d4-8552-49de-9f36-877d666b59d9","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32896","advisory_id":"aa6dc9d4-8552-49de-9f36-877d666b59d9","event_types":["advisory"],"published_at":"2026-10-24T20:56:54.433071+00:00","technologies":["core-kev","pixel"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-06-13T00:00:00+00:00","detail_url":"/advisories/advisory%3Aaa6dc9d4-8552-49de-9f36-877d666b59d9","group":{"id":"advisory:aa6dc9d4-8552-49de-9f36-877d666b59d9","revision":1,"primary_event_id":1134,"change":"published","superseded_by":[],"changed":{"id":1134,"cve_ids":["CVE-2024-32896"],"payload":{"kind":"advisory","title":"Android Pixel Privilege Escalation Vulnerability","summary":"Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-32896","products":[{"name":{"value":"Pixel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-32896","aliases":["CVE-2024-32896"],"affected":[],"modified":"2024-06-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-783"],"cveID":"CVE-2024-32896","notes":"https://source.android.com/docs/security/bulletin/pixel/2024-06-01; https://nvd.nist.gov/vuln/detail/CVE-2024-32896","dueDate":"2024-07-04","product":"Pixel","dateAdded":"2024-06-13","vendorProject":"Android","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation.","vulnerabilityName":"Android Pixel Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-32896","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:aa6dc9d4-8552-49de-9f36-877d666b59d9","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32896","advisory_id":"aa6dc9d4-8552-49de-9f36-877d666b59d9","event_types":["advisory"],"published_at":"2026-10-24T20:56:54.433071+00:00","technologies":["core-kev","pixel"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-06-13T00:00:00+00:00","detail_url":"/events/1134"},"members":[{"id":1134,"cve_ids":["CVE-2024-32896"],"payload":{"kind":"advisory","title":"Android Pixel Privilege Escalation Vulnerability","summary":"Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-32896","products":[{"name":{"value":"Pixel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-32896","aliases":["CVE-2024-32896"],"affected":[],"modified":"2024-06-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-783"],"cveID":"CVE-2024-32896","notes":"https://source.android.com/docs/security/bulletin/pixel/2024-06-01; https://nvd.nist.gov/vuln/detail/CVE-2024-32896","dueDate":"2024-07-04","product":"Pixel","dateAdded":"2024-06-13","vendorProject":"Android","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation.","vulnerabilityName":"Android Pixel Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-32896","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:aa6dc9d4-8552-49de-9f36-877d666b59d9","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32896","advisory_id":"aa6dc9d4-8552-49de-9f36-877d666b59d9","event_types":["advisory"],"published_at":"2026-10-24T20:56:54.433071+00:00","technologies":["core-kev","pixel"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-06-13T00:00:00+00:00","detail_url":"/events/1134"}]}},{"id":42,"cve_ids":["CVE-2026-58704"],"payload":{"kind":"advisory","title":"Google Pixel Improper Authorization Vulnerability","summary":"Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges. CISA required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","evidence":"kev:CVE-2026-58704","products":[{"name":{"value":"Pixel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58704","aliases":["CVE-2026-58704"],"affected":[],"modified":"2026-09-16T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-693"],"cveID":"CVE-2026-58704","notes":"https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-58704","dueDate":"2026-09-19","product":"Pixel","dateAdded":"2026-09-16","vendorProject":"Google","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_exploited":true,"shortDescription":"Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges.","vulnerabilityName":"Google Pixel Improper Authorization Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2026-58704","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c589d261-3bfb-4085-acf0-464dbbf45ade","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-58704","advisory_id":"c589d261-3bfb-4085-acf0-464dbbf45ade","event_types":["advisory"],"published_at":"2026-10-24T20:39:47.342459+00:00","technologies":["core-kev","pixel"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-16T00:00:00+00:00","detail_url":"/advisories/advisory%3Ac589d261-3bfb-4085-acf0-464dbbf45ade","group":{"id":"advisory:c589d261-3bfb-4085-acf0-464dbbf45ade","revision":1,"primary_event_id":42,"change":"published","superseded_by":[],"changed":{"id":42,"cve_ids":["CVE-2026-58704"],"payload":{"kind":"advisory","title":"Google Pixel Improper Authorization Vulnerability","summary":"Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges. CISA required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","evidence":"kev:CVE-2026-58704","products":[{"name":{"value":"Pixel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58704","aliases":["CVE-2026-58704"],"affected":[],"modified":"2026-09-16T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-693"],"cveID":"CVE-2026-58704","notes":"https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-58704","dueDate":"2026-09-19","product":"Pixel","dateAdded":"2026-09-16","vendorProject":"Google","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_exploited":true,"shortDescription":"Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges.","vulnerabilityName":"Google Pixel Improper Authorization Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2026-58704","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c589d261-3bfb-4085-acf0-464dbbf45ade","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-58704","advisory_id":"c589d261-3bfb-4085-acf0-464dbbf45ade","event_types":["advisory"],"published_at":"2026-10-24T20:39:47.342459+00:00","technologies":["core-kev","pixel"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-16T00:00:00+00:00","detail_url":"/events/42"},"members":[{"id":42,"cve_ids":["CVE-2026-58704"],"payload":{"kind":"advisory","title":"Google Pixel Improper Authorization Vulnerability","summary":"Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges. CISA required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","evidence":"kev:CVE-2026-58704","products":[{"name":{"value":"Pixel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58704","aliases":["CVE-2026-58704"],"affected":[],"modified":"2026-09-16T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-693"],"cveID":"CVE-2026-58704","notes":"https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-58704","dueDate":"2026-09-19","product":"Pixel","dateAdded":"2026-09-16","vendorProject":"Google","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_exploited":true,"shortDescription":"Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges.","vulnerabilityName":"Google Pixel Improper Authorization Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2026-58704","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c589d261-3bfb-4085-acf0-464dbbf45ade","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-58704","advisory_id":"c589d261-3bfb-4085-acf0-464dbbf45ade","event_types":["advisory"],"published_at":"2026-10-24T20:39:47.342459+00:00","technologies":["core-kev","pixel"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-16T00:00:00+00:00","detail_url":"/events/42"}]}}],"next_after":2625,"next_before":42}