Google’s July 2023 security update has fixed more than forty (40) vulnerabilities, with three (3) of the flaws being actively exploited by threat actors in-the-wild. Out of the three (3), one (1) critical Android flaw has been added to the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Known Exploited Vulnerabilities (KEV) catalog, mandating that all Federal Civilian Executive Branch (FCEB) agencies patch the flaw by July 28, 2023. The patches were released on July 1 and July 5, 2023, with the first addressing vulnerabilities impacting the framework and system components, and the second mitigating vulnerabilities in the kernel and closed source components. The vulnerability added to CISA’s KEV is tracked as CVE-2021-29256 and is described as a use-after-free vulnerability, which affects the GPU kernel drivers of specific versions of Bifrost, Valhall, and Midgard Arm Mali. An unprivileged attacker could exploit the flaw by conducting malicious activity in GPU memory, gaining access to already freed memory. If successful, the threat actor could escalate their privileges to root as well as gain access to sensitive information. Although the vulnerability added to the KEV is mandated to be patched by FCEB agencies, any organizations or users impacted by this flaw should patch their devices immediately as the vulnerability is under active attack. CTIX analysts will continue to report on the most critical vulnerabilities and provide real-time intelligence for our readers.