Security News > 2021 > June > Critical Vulnerabilities Patched in Android With June 2021 Security Updates
Google this week announced the availability of the latest monthly security patches for the Android operating system, which address more than 50 vulnerabilities, including several rated critical severity.
The bug affects Android 8.1, 9, 10, and 11 iterations, the same as another critical flaw in the System component - CVE-2021-0516 - which could lead to elevation of privileges.
All eight flaws were addressed with the 2021-06-01 security patch level, which fixes six other high-risk issues in the mobile platform: one elevation of privilege in Android runtime, one information disclosure in Framework, and four elevation of privilege issues in Media Framework.
The second part of this month's security update - the 2021-06-05 security patch level - arrives on devices with fixes for 27 vulnerabilities in Framework, System, Kernel components, MediaTek components, Qualcomm components, and Qualcomm closed-source components.
This month's security patches for Google's Pixel devices are now rolling out with fixes for a total of 43 security holes affecting Android runtime, Framework, Media Framework, System, Kernel components, and Pixel components.
On Pixel devices, a security patch level of 2021-06-05 or later resolves all issues included in Google's two June 2021 security bulletins.
News URL
Related news
- The ongoing evolution of the CIS Critical Security Controls (source)
- SAP fixes critical vulnerabilities in NetWeaver application servers (source)
- Critical vulnerabilities remain unresolved due to prioritization gaps (source)
- Critical SimpleHelp vulnerabilities fixed, update your server instances! (source)
- Critical Cacti Security Flaw (CVE-2025-22604) Enables Remote Code Execution (source)
- Google Patches 47 Android Security Flaws, Including Actively Exploited CVE-2024-53104 (source)
- Google patches odd Android kernel security bug amid signs of targeted exploitation (source)
- Netgear warns users to patch critical WiFi router vulnerabilities (source)
- Cisco Patches Critical ISE Vulnerabilities Enabling Root CmdExec and PrivEsc (source)
- Zimbra Releases Security Updates for SQL Injection, Stored XSS, and SSRF Vulnerabilities (source)
Related Vulnerability
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-06-21 | CVE-2021-0516 | Use After Free vulnerability in Google Android In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. | 9.8 |