Google Pixel Watch vulnerabilities

Latest Google Pixel Watch CVEs

Newest publication first

1. CVE-2023-48418 User Build misconfiguration resulting in local escalation of privilege

   Published 2024-01-02

   High·CVSS 7.8 EPSS 0.22%

   In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...

2. CVE-2023-4164 There is a possible information disclosure due to a missing permission check in Pixel Watch

   Published 2024-01-02

   Medium·CVSS 5.5 EPSS 0.08%

   There is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of health data with no additional execution privileges needed.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.