{"id":1564413,"date":"2025-03-04T04:01:49","date_gmt":"2025-03-04T06:01:49","guid":{"rendered":"https:\/\/teknomers.com\/fr\/la-mise-a-jour-de-la-securite-android-de-google-de-google-corrige-deux-vulnerabilites-activement-exploitees\/"},"modified":"2025-03-04T04:01:54","modified_gmt":"2025-03-04T06:01:54","slug":"la-mise-a-jour-de-la-securite-android-de-google-de-google-corrige-deux-vulnerabilites-activement-exploitees","status":"publish","type":"post","link":"https:\/\/teknomers.com\/fr\/la-mise-a-jour-de-la-securite-android-de-google-de-google-corrige-deux-vulnerabilites-activement-exploitees\/","title":{"rendered":"La mise \u00e0 jour de la s\u00e9curit\u00e9 Android de Google de Google corrige deux vuln\u00e9rabilit\u00e9s activement exploit\u00e9es"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">04 mars 2025<\/span><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">Ravie Lakshmanan<\/span><\/span><span class=\"p-tags\">Vuln\u00e9rabilit\u00e9 \/ s\u00e9curit\u00e9 mobile<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><a rel=\"nofollow\" href=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2025\/03\/La-mise-a-jour-de-la-securite-Android-de-Google.png\" style=\"clear: left; display: block; float: left;  text-align: center;\"><\/a><\/div>\n<p>Google a <a rel=\"noopener nofollow\" href=\"https:\/\/source.android.com\/docs\/security\/bulletin\/2025-03-01\" target=\"_blank\">lib\u00e9r\u00e9<\/a> Son bulletin de s\u00e9curit\u00e9 Android mensuel pour mars 2025 pour aborder un total de 44 vuln\u00e9rabilit\u00e9s, dont deux qui, selon lui, ont \u00e9t\u00e9 en cours d&#8217;exploitation active dans la nature.<\/p>\n<p>Les deux vuln\u00e9rabilit\u00e9s de haute s\u00e9v\u00e9rit\u00e9 sont r\u00e9pertori\u00e9es ci-dessous &#8211;<\/p>\n<ul>\n<li><strong><a rel=\"noopener nofollow\" href=\"https:\/\/android.googlesource.com\/platform\/frameworks\/base\/+\/7f83c671626f9bf993581f4598c22482d87cba10\" target=\"_blank\">CVE-2024-43093<\/a><\/strong>  &#8211; Une faille d&#8217;escalade de privil\u00e8ge dans le composant Framework qui pourrait entra\u00eener un acc\u00e8s non autoris\u00e9 \u00e0 &#8220;Android \/ Data&#8221;, &#8220;Android \/ OBB&#8221; et &#8220;Android \/ Sandbox&#8221; r\u00e9pertoires et leurs sous-r\u00e9pertoires respectifs.<\/li>\n<li><strong><a rel=\"noopener nofollow\" href=\"https:\/\/android.googlesource.com\/kernel\/common\/+\/f02dd268a08d4e7ec09ec0ddd2a861ab5a51a0ae\" target=\"_blank\">CVE-2024-50302<\/a><\/strong>  &#8211; Un d\u00e9faut d&#8217;escalade de privil\u00e8ge dans le composant HID USB du noyau Linux qui pourrait conduire \u00e0 une fuite de m\u00e9moire du noyau non initialis\u00e9 \u00e0 un attaquant local \u00e0 travers des rapports HID sp\u00e9cialement con\u00e7us.<\/li>\n<\/ul>\n<p>Il convient de noter que le CVE-2024-43093 a \u00e9t\u00e9 pr\u00e9c\u00e9demment signal\u00e9 par Google dans son avis de s\u00e9curit\u00e9 pour novembre 2024, comme exploit\u00e9 activement dans la nature. Il n&#8217;est pas clair ce qui a incit\u00e9 le g\u00e9ant de la technologie \u00e0 \u00e9mettre l&#8217;alerte une deuxi\u00e8me fois.<\/p>\n<div class=\"dog_two clear\"><center class=\"cf\"><a rel=\"nofollow noopener sponsored\" href=\"https:\/\/thehackernews.uk\/cis-securesuite\" target=\"_blank\" title=\"Cybersecurity\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"Cybers\u00e9curit\u00e9\" src=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2025\/03\/1740818990_705_Mozilla-met-a-jour-les-termes-de-Firefox-apres-le.png\" width=\"727\" height=\"90\"\/><\/a><\/center><\/div>\n<p>Le Hacker News a contact\u00e9 Google pour plus de commentaires, et nous mettrons \u00e0 jour l&#8217;histoire si nous entendons.<\/p>\n<p>Le CVE-2024-50302, en revanche, est l&#8217;une des trois vuln\u00e9rabilit\u00e9s qui ont \u00e9t\u00e9 encha\u00een\u00e9es en un exploit z\u00e9ro-jour con\u00e7u par Cellebrite pour se transformer en t\u00e9l\u00e9phone Android d&#8217;un militant des jeunes serbes en d\u00e9cembre 2024.<\/p>\n<p>L&#8217;exploit a impliqu\u00e9 l&#8217;utilisation de CVE-2024-53104, CVE-2024-53197 et CVE-2024-50302 pour obtenir des privil\u00e8ges \u00e9lev\u00e9s et d\u00e9ployer probablement un logiciel spym\u00e9trique Android surnomm\u00e9 Novispy.<\/p>\n<p>Les trois vuln\u00e9rabilit\u00e9s r\u00e9sident dans le noyau Linux et ont \u00e9t\u00e9 corrig\u00e9es \u00e0 la fin de l&#8217;ann\u00e9e derni\u00e8re. Le CVE-2024-53104 a \u00e9t\u00e9 abord\u00e9 par Google dans Android le mois dernier.<\/p>\n<p>Dans son avis, Google a reconnu que le CVE-2024-43093 et \u200b\u200ble CVE-2024-50302 ont fait l&#8217;objet d&#8217;une &#8220;exploitation limit\u00e9e et cibl\u00e9e&#8221;.<\/p>\n<p>La soci\u00e9t\u00e9 bas\u00e9e \u00e0 Mountain View a publi\u00e9 deux niveaux de correctifs de s\u00e9curit\u00e9, 2025-03-01 et 2025-03-05, afin de donner de la flexibilit\u00e9 aux partenaires Android pour aborder une partie des vuln\u00e9rabilit\u00e9s similaires dans tous les appareils Android plus rapidement.<\/p>\n<p><\/p>\n<div class=\"cf note-b\">Vous avez trouv\u00e9 cet article int\u00e9ressant? Suivez-nous <a rel=\"noopener nofollow\" href=\"https:\/\/twitter.com\/thehackersnews\" target=\"_blank\">Gazouillement <i class=\"icon-font icon-twitter\">\uf099<\/i><\/a>  et <a rel=\"noopener nofollow\" href=\"https:\/\/www.linkedin.com\/company\/thehackernews\/\" target=\"_blank\">Liendin<\/a> Pour lire plus de contenu exclusif que nous publions.<\/div>\n<\/div>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/><br \/>\n<br \/><a href=\"https:\/\/thehackernews.com\/2025\/03\/googles-march-2025-android-security.html\" rel=\"nofollow noopener\" target=\"_blank\">ttn-fr-57<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\ue80204 mars 2025\ue804Ravie LakshmananVuln\u00e9rabilit\u00e9 \/ s\u00e9curit\u00e9 mobile Google a lib\u00e9r\u00e9 Son bulletin de s\u00e9curit\u00e9 Android mensuel pour mars 2025 pour aborder un total de 44 vuln\u00e9rabilit\u00e9s, dont deux qui, selon lui, ont \u00e9t\u00e9 en cours d&#8217;exploitation active dans la nature. Les deux vuln\u00e9rabilit\u00e9s de haute s\u00e9v\u00e9rit\u00e9 sont r\u00e9pertori\u00e9es ci-dessous &#8211; CVE-2024-43093 &#8211; Une faille d&#8217;escalade [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1564414,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[4807,274266,274265,8738,4168,6815,79002,274264,4161,274263,6124,245,4808,7755,3995,274267,2811,4160,1835,238617,246491,4172,79016,4166,4164,12365],"class_list":["post-1564413","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technologie","tag-activement","tag-actualites-de-piratage","tag-actualites-des-pirates","tag-android","tag-comment-pirater","tag-corrige","tag-cyber-security-news","tag-cyber-security-news-aujourdhui","tag-cyber-mises-a-jour","tag-cyber-nouvelles","tag-cyberattaques","tag-deux","tag-exploitees","tag-google","tag-jour","tag-malware-ransomware","tag-mise","tag-mises-a-jour-de-la-cybersecurite","tag-securite","tag-securite-de-linformation","tag-securite-du-reseau","tag-securite-informatique","tag-the-hacker-news","tag-violation-de-donnees","tag-vulnerabilite-logicielle","tag-vulnerabilites"],"_links":{"self":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/1564413","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/comments?post=1564413"}],"version-history":[{"count":0,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/1564413\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media\/1564414"}],"wp:attachment":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media?parent=1564413"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/categories?post=1564413"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/tags?post=1564413"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}