{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Pixel toutes versions sans le correctif de s\u00e9curit\u00e9 du 1er novembre 2023","product":{"name":"Pixel","vendor":{"name":"Google","scada":false}}},{"description":"Android Open Source Project (AOSP) versions 11, 12, 12L, 13, 14 sans le correctif de s\u00e9curit\u00e9 du 1er novembre 2023","product":{"name":"Android","vendor":{"name":"Google","scada":false}}}],"affected_systems_content":null,"content":"## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2023-28570","url":"https://www.cve.org/CVERecord?id=CVE-2023-28570"},{"name":"CVE-2023-40124","url":"https://www.cve.org/CVERecord?id=CVE-2023-40124"},{"name":"CVE-2023-28572","url":"https://www.cve.org/CVERecord?id=CVE-2023-28572"},{"name":"CVE-2023-28554","url":"https://www.cve.org/CVERecord?id=CVE-2023-28554"},{"name":"CVE-2023-40110","url":"https://www.cve.org/CVERecord?id=CVE-2023-40110"},{"name":"CVE-2023-40109","url":"https://www.cve.org/CVERecord?id=CVE-2023-40109"},{"name":"CVE-2023-40107","url":"https://www.cve.org/CVERecord?id=CVE-2023-40107"},{"name":"CVE-2023-40105","url":"https://www.cve.org/CVERecord?id=CVE-2023-40105"},{"name":"CVE-2023-28563","url":"https://www.cve.org/CVERecord?id=CVE-2023-28563"},{"name":"CVE-2023-21111","url":"https://www.cve.org/CVERecord?id=CVE-2023-21111"},{"name":"CVE-2023-28568","url":"https://www.cve.org/CVERecord?id=CVE-2023-28568"},{"name":"CVE-2023-40112","url":"https://www.cve.org/CVERecord?id=CVE-2023-40112"},{"name":"CVE-2023-40113","url":"https://www.cve.org/CVERecord?id=CVE-2023-40113"},{"name":"CVE-2023-28566","url":"https://www.cve.org/CVERecord?id=CVE-2023-28566"},{"name":"CVE-2023-40111","url":"https://www.cve.org/CVERecord?id=CVE-2023-40111"},{"name":"CVE-2023-40106","url":"https://www.cve.org/CVERecord?id=CVE-2023-40106"},{"name":"CVE-2023-21103","url":"https://www.cve.org/CVERecord?id=CVE-2023-21103"},{"name":"CVE-2023-40114","url":"https://www.cve.org/CVERecord?id=CVE-2023-40114"},{"name":"CVE-2023-28553","url":"https://www.cve.org/CVERecord?id=CVE-2023-28553"},{"name":"CVE-2023-40104","url":"https://www.cve.org/CVERecord?id=CVE-2023-40104"},{"name":"CVE-2023-28569","url":"https://www.cve.org/CVERecord?id=CVE-2023-28569"}],"links":[],"reference":"CERTFR-2023-AVI-0951","revisions":[{"description":"Version initiale","revision_date":"2023-11-16T00:00:00.000000"}],"risks":[{"description":"D\u00e9ni de service"},{"description":"Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"},{"description":"\u00c9l\u00e9vation de privil\u00e8ges"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Android et Pixel.\nElles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service, une\natteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une \u00e9l\u00e9vation de\nprivil\u00e8ges.\n","title":"Multiples vuln\u00e9rabilit\u00e9s dans Android et Pixel","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Pixel 2023-11-01 du 06 novembre 2023","url":"https://source.android.com/docs/security/bulletin/pixel/2023-11-01?hl=fr"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Android 2023-11-01 du 06 novembre 2023","url":"https://source.android.com/docs/security/bulletin/2023-11-01?hl=fr"}]}