The March 2023 Android security update is rolling out and fixes two critical bugs. This is why you don’t want to skip this one.
Google’s March 2023 security update for Android is packed with 60 fixes. However, this is not just another routine security update. The update also patches two critical remote code execution (RCE) exploits that could control an Android device without your permission.
What is a Remote Code Execution (RCE) Exploit?
An RCE attack usually leads to meaner, more malicious attacks. It is one of the most popular methods criminals use to hack websites. On the desktop PC side, RCE attacks can evolve into RDP (Remote Desktop Protocol) attacks that can steal data, blackmail individuals, etc. It has not earned a critical rating for kicks and giggles…
The good news is that preventing RDP attacks on desktop devices, just like preventing RCE attacks on an Android, is possible simply by applying security patches as they become available. The moral of the story? The Android March 2023 security update, like all security updates, should not be missed.
What will be fixed in the March 2023 Android security update?
The Android Security Bulletin details the issues that will be fixed in the March 2023 Android Security Update. We won’t go through them all here. But Google does provide a few details about the update and the security vulnerabilities it prevents:
- The update prevents apps from automatically increasing their privileges after updating to a higher target SDK.
- It eliminates the risk of “disclosure of local information” without user consent.
- It removes “remote code execution” exploits affecting Android 11, 12 and 13.
The March 2023 security update for Android also addresses component issues with MediaTek, Unisoc, and Qualcomm. These fixes range from high to critical in severity. Seriously, download the update.
How to download the March 2023 Android security update
The March 2023 Android Security Update is available for all Android versions that still receive regular updates (Android 11, 12, and 13). If you’re running Android 10 or lower, your Android version is end of life.
But Bleeping Computer mentions that users running Android 10 or below may be able to install some (some, not all) of the update’s critical security patches by updating Google Play instead. Do this by tapping Settings > Security & privacy > Updates > Google Play system update > Check for updates.
If an update is found, it will be downloaded automatically. Restart your device to apply the update. Then consider upgrading your device.
For everyone else using a more modern version of Android, apply the March 2023 security update for Android by selecting Settings > System > System update > Check for updates. As always, the exact path to check for updates may vary slightly depending on the device you are using.
You know the drill. If an update is found, it will be downloaded. Restart to apply the security patches to your Android device. And if you’re still using something below Android 13 as of March 2023, why? Give your device the security it needs and upgrade to the latest version of Android if possible.
Don’t sleep on Android security updates
An Android device with open exploits is an open invitation to bad actors. Shut the door in their face! Tell them to go elsewhere by applying the March 2023 Android security updates as soon as possible and keep your Android device well protected.