Google’s latest Android security update fixes two actively exploited flaws

Google’s latest Android security update patches 107 vulnerabilities across system, kernel and major vendor components, with two high-severity flaws already under limited, targeted exploitation in the wild. The two elevated-privilege and information-disclosure vulnerabilities in the Framework are CVE-2025-48572 and CVE-2025-48633, and Google notes they are among those under active exploitation.

The update also fixes several kernel flaws, including CVE-2025-48623, CVE-2025-48624, CVE-2025-48637 and CVE-2025-48638, described as critical in upstream kernel and pKVM or IOMMU subcomponents, as well as issues in Qualcomm closed-source components such as CVE-2025-47319 and CVE-2025-47372. The advisory published by Google states the most severe issue could lead to remote denial of service with no additional execution privileges needed.

December 2025’s release provides two patch levels (12-01, 12-05) intended to speed fixes across devices. For those seeking technical detail, Google did not provide additional specifics about the attacks exploiting these vulnerabilities. according to Google