{"id":1198318,"date":"2024-06-13T23:16:08","date_gmt":"2024-06-14T01:16:08","guid":{"rendered":"https:\/\/teknomers.com\/fr\/google-met-en-garde-contre-une-faille-de-securite-du-micrologiciel-pixel-exploitee-comme-zero-day\/"},"modified":"2024-06-13T23:16:12","modified_gmt":"2024-06-14T01:16:12","slug":"google-met-en-garde-contre-une-faille-de-securite-du-micrologiciel-pixel-exploitee-comme-zero-day","status":"publish","type":"post","link":"https:\/\/teknomers.com\/fr\/google-met-en-garde-contre-une-faille-de-securite-du-micrologiciel-pixel-exploitee-comme-zero-day\/","title":{"rendered":"Google met en garde contre une faille de s\u00e9curit\u00e9 du micrologiciel Pixel exploit\u00e9e comme Zero-Day"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">13 juin 2024<\/span><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">R\u00e9daction<\/span><\/span><span class=\"p-tags\">S\u00e9curit\u00e9 mobile\/vuln\u00e9rabilit\u00e9<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><a rel=\"nofollow\" href=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2024\/06\/Google-met-en-garde-contre-une-faille-de-securite-du.png\" style=\"clear: left; display: block; float: left; text-align: center;\"><\/a><\/div>\n<p>Google a <a rel=\"nofollow noopener\" href=\"https:\/\/source.android.com\/docs\/security\/bulletin\/pixel\/2024-06-01\" target=\"_blank\">averti<\/a> qu&#8217;une faille de s\u00e9curit\u00e9 impactant le Pixel Firmware a \u00e9t\u00e9 exploit\u00e9e dans la nature comme un jour z\u00e9ro.<\/p>\n<p>La vuln\u00e9rabilit\u00e9 de haute gravit\u00e9, \u00e9tiquet\u00e9e comme <strong>CVE-2024-32896<\/strong>a \u00e9t\u00e9 d\u00e9crit comme un probl\u00e8me d\u2019\u00e9l\u00e9vation de privil\u00e8ges dans le micrologiciel Pixel.<\/p>\n<p>La soci\u00e9t\u00e9 n&#8217;a partag\u00e9 aucun d\u00e9tail suppl\u00e9mentaire concernant la nature des attaques qui l&#8217;exploitent, mais a not\u00e9 &#8220;qu&#8217;il y a des indications selon lesquelles CVE-2024-32896 pourrait faire l&#8217;objet d&#8217;une exploitation limit\u00e9e et cibl\u00e9e&#8221;.<\/p>\n<p>La mise \u00e0 jour de s\u00e9curit\u00e9 de juin 2024 corrige un total de 50 vuln\u00e9rabilit\u00e9s de s\u00e9curit\u00e9, dont cinq concernent divers composants des chipsets Qualcomm.<\/p>\n<div class=\"dog_two clear\"><center class=\"cf\"><a rel=\"nofollow noopener\" href=\"https:\/\/thehackernews.uk\/ad-d\" target=\"_blank\" title=\"Cybersecurity\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"La cyber-s\u00e9curit\u00e9\" src=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2024\/06\/Sticky-Werewolf-etend-ses-cibles-de-cyberattaques-en-Russie-et.jpg\" width=\"727\" height=\"90\"\/><\/a><\/center><\/div>\n<p>Certains des probl\u00e8mes notables corrig\u00e9s incluent un probl\u00e8me de d\u00e9ni de service (DoS) affectant le modem et de nombreuses failles de divulgation d&#8217;informations affectant les GsmS, ACPM et Trusty. <\/p>\n<p>Les mises \u00e0 jour sont disponibles pour <a rel=\"nofollow noopener\" href=\"https:\/\/support.google.com\/pixelphone\/answer\/4457705\" target=\"_blank\">Appareils Pixel pris en charge<\/a>comme le Pixel 5a avec 5G, le Pixel 6a, le Pixel 6, le Pixel 6 Pro, le Pixel 7, le Pixel 7 Pro, le Pixel 7a, le Pixel 8, le Pixel 8 Pro, le Pixel 8a et le Pixel Fold.<\/p>\n<p>Plus t\u00f4t en avril, Google a r\u00e9solu deux failles de s\u00e9curit\u00e9 dans les composants du chargeur de d\u00e9marrage et du micrologiciel (CVE-2024-29745 et CVE-2024-29748) qui ont \u00e9t\u00e9 utilis\u00e9es par des soci\u00e9t\u00e9s m\u00e9dico-l\u00e9gales pour voler des donn\u00e9es sensibles.<\/p>\n<p>Puis la semaine derni\u00e8re, Arm a inform\u00e9 les utilisateurs d&#8217;une vuln\u00e9rabilit\u00e9 li\u00e9e \u00e0 la m\u00e9moire (CVE-2024-4610) dans les pilotes du noyau GPU Bifrost et Valhall qui est activement exploit\u00e9e.<\/p>\n<p><\/p>\n<div class=\"cf note-b\">Vous avez trouv\u00e9 cet article int\u00e9ressant ?  Suivez-nous sur <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/thehackersnews\" target=\"_blank\">Twitter <i class=\"icon-font icon-twitter\">\uf099<\/i><\/a>  et <a rel=\"nofollow noopener\" href=\"https:\/\/www.linkedin.com\/company\/thehackernews\/\" target=\"_blank\">LinkedIn<\/a> pour lire plus de contenu exclusif que nous publions.<\/div>\n<\/div>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/><br \/>\n<br \/><a href=\"https:\/\/thehackernews.com\/2024\/06\/google-warns-of-pixel-firmware-security.html\" rel=\"nofollow noopener\" target=\"_blank\">ttn-fr-57<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\ue80213 juin 2024\ue804R\u00e9dactionS\u00e9curit\u00e9 mobile\/vuln\u00e9rabilit\u00e9 Google a averti qu&#8217;une faille de s\u00e9curit\u00e9 impactant le Pixel Firmware a \u00e9t\u00e9 exploit\u00e9e dans la nature comme un jour z\u00e9ro. La vuln\u00e9rabilit\u00e9 de haute gravit\u00e9, \u00e9tiquet\u00e9e comme CVE-2024-32896a \u00e9t\u00e9 d\u00e9crit comme un probl\u00e8me d\u2019\u00e9l\u00e9vation de privil\u00e8ges dans le micrologiciel Pixel. La soci\u00e9t\u00e9 n&#8217;a partag\u00e9 aucun d\u00e9tail suppl\u00e9mentaire concernant la nature [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1198319,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[200292,1756,4168,841,4165,4161,200267,36372,9048,525,7755,4159,4171,200271,4955,21601,200268,200269,200270,63033,1835,128318,4172,4169,196,4166,4164,35759],"class_list":["post-1198318","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technologie","tag-actualites-sur-la-cybersecurite","tag-comme","tag-comment-pirater","tag-contre","tag-cyber-attaques","tag-cyber-mises-a-jour","tag-cyberactualites","tag-exploitee","tag-faille","tag-garde","tag-google","tag-lactualite-de-la-cybersecurite-aujourdhui","tag-lactualite-des-hackers","tag-logiciel-malveillant-rancongiciel","tag-met","tag-micrologiciel","tag-mises-a-jour-sur-la-cybersecurite","tag-nouvelles-des-pirates","tag-nouvelles-sur-le-piratage","tag-pixel","tag-securite","tag-securite-des-informations","tag-securite-informatique","tag-securite-internet","tag-une","tag-violation-de-donnees","tag-vulnerabilite-logicielle","tag-zeroday"],"_links":{"self":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/1198318","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/comments?post=1198318"}],"version-history":[{"count":0,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/1198318\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media\/1198319"}],"wp:attachment":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media?parent=1198318"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/categories?post=1198318"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/tags?post=1198318"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}