2 Android Zero-Day Bugs Under Active Exploit

Google released patches for 62 Android vulnerabilities, including two actively exploited zero-days in Linux kernel USB components: CVE-2024-53197 (privilege escalation) — linked to a Cellebrite exploit chain used to unlock a protester's device and attempt spyware installation — and CVE-2024-53150 (out-of-bounds information disclosure, CVSS 7.1). Fixes are available for Android 13.14 and 15, and users should update to patch level 2025-04-05 or later when their device vendor rolls out the updates.