Google Patches Android Zero-Day and 123 Other Vulnerabilities
Summary
Google’s Android update patches 124 vulnerabilities, including CVE-2025-48595, a high-severity Framework privilege-escalation flaw with indications of limited, targeted exploitation. One other patched flaw allows remote code execution.
Key points
- Google says CVE-2025-48595, a high-severity Android Framework privilege-escalation vulnerability, may be under limited, targeted exploitation.
- The article says details about attacks exploiting CVE-2025-48595 are unavailable.
- The update patches 124 vulnerabilities; 18 of the remaining flaws are rated critical.
- The patched issues affect Android Framework, System, Kernel, and components from Qualcomm, Imagination Technologies, MediaTek, and Unisoc.
- Most of the other flaws can enable privilege escalation or denial of service; some can expose information.
- CVE-2026-0059 is the only other vulnerability identified as allowing remote code execution.
Article Details
- Vulnerability Types
- Privilege escalation
- Denial of service
- Information disclosure
- Remote code execution
- Severity
- CVE-2025-48595 is high severity; 18 other patched vulnerabilities are rated critical.
- Exploitation Status
- reported
- Exploit Availability
- unknown
- Patch Status
- available
CVE
Vendors
GoogleGoogle on Monday announced its latest Android update, which includes patches for 124 vulnerabilities, including a zero-day that has been exploited in targeted attacks.Imagination TechnologiesThey affect System, Framework, Kernel, and components provided by Imagination Technologies, MediaTek, Unisoc, and Qualcomm.MediaTekThey affect System, Framework, Kernel, and components provided by Imagination Technologies, MediaTek, Unisoc, and Qualcomm.Qualcommversions, 18 have been assigned a ‘critical’ severity rating. They affect the framework, system, and Qualcomm closed-source components, and their exploitation can lead to privilege escalation and denial of serviceUnisocThey affect System, Framework, Kernel, and components provided by Imagination Technologies, MediaTek, Unisoc, and Qualcomm.