socradar.io 6/3/2026, 12:06:05 PM · external

Android Local Privilege Flaw CVE-2025-48595 Exploited in the Wild

Android Local Privilege Flaw CVE-2025-48595 Exploited in the Wild
CyberSIXT Evidence Panel
Primary Source cisa.gov
CISA KEV Listed in KEV
Patch Patch Available

THE blog post discusses CVE-2025-48595, a high-severity vulnerability in the Android Framework, included in Google's June 2026 security update. This flaw, which allows local elevation of privilege, is marked as potentially being exploited in the wild. It affects Android versions 14 through 16, and exploitation typically occurs through malicious application installations. Google has confirmed instances of limited, targeted exploitation.

The June 2026 bulletin addresses 124 vulnerabilities, with CVE-2025-65018 being the most severe, and emphasizes the need for teams to promptly apply patches and enhance security measures against exploit chaining. Users are urged to prioritize the 2026-06-05 patches, verify patch levels across devices, and tighten app installation policies.

View Primary Source Via socradar.io

Article by CyberSIXT

Timeline Coverage

Swipe to explore timeline