cyber.hendryadrian.com
Security News · thehackernews.com

Google’s June Android Update Patches 124 Flaws, Including One Under Targeted Exploitation

· Original article ↗

Summary

Google’s June 2026 Android update patches 124 vulnerabilities. Google says CVE-2025-48595, a Framework flaw affecting Android 14, 15, 16 and 16 QPR2, may be under limited, targeted exploitation.

Key points

  • Google released June 2026 patches for 124 Android vulnerabilities.
  • Google says CVE-2025-48595 may be under limited, targeted exploitation; it did not identify the actors, targets or scale.
  • The high-severity Framework flaw involves an integer overflow and could allow local privilege escalation without user interaction.
  • Affected versions are Android 14, 15, 16 and 16 QPR2.
  • The 2026-06-05 patch level includes the 2026-06-01 fixes plus kernel and chipset patches from Imagination Technologies, MediaTek, Qualcomm and Unisoc.

Article Details

Event Type
Google released the June 2026 Android security update, patching 124 vulnerabilities.
Impact
CVE-2025-48595 is a high-severity Framework vulnerability that can enable local privilege escalation without user interaction. Google reports indications of limited, targeted exploitation but did not disclose the actors, targets, or scale. Android versions 14, 15, 16, and 16 QPR2 are affected. The update also patches System, kernel, and chipset components.

CVE

CVE-2025-48595Google · AndroidGoogle released Android security patches for June 2026 that address 124 vulnerabilities, including CVE-2025-48595, a high-severity Framework flaw that is already showing signs of limited, targeted exploitation.

Vendors

GoogleGoogle released Android security patches for June 2026 that address 124 vulnerabilities, including CVE-2025-48595, a high-severity Framework flaw that is already showing signs of limited, targeted exploitation.Imagination TechnologiesThe update also fixes additional issues in the System component and includes kernel and chipset patches from Imagination Technologies, MediaTek, Qualcomm, and Unisoc.MediaTekThe update also fixes additional issues in the System component and includes kernel and chipset patches from Imagination Technologies, MediaTek, Qualcomm, and Unisoc.QualcommThe update also fixes additional issues in the System component and includes kernel and chipset patches from Imagination Technologies, MediaTek, Qualcomm, and Unisoc.UnisocThe update also fixes additional issues in the System component and includes kernel and chipset patches from Imagination Technologies, MediaTek, Qualcomm, and Unisoc.

Products

AndroidGoogle released Android security patches for June 2026 that address 124 vulnerabilities, including CVE-2025-48595, a high-severity Framework flaw that is already showing signs of limited, targeted exploitation.

Related Articles