Google patches Android zero day CVE‑2025‑48595 among 124 fixes

GOOGLE announced a new Android update aimed at patching 124 vulnerabilities, including a critical zero-day exploit (CVE-2025-48595) linked to privilege escalation in Android's Framework. Though exploitation details remain scarce, it indicates targeted attacks are occurring. The update also addresses 18 critical vulnerabilities capable of privilege escalation and DoS attacks, with some affecting Qualcomm components. Only one vulnerability (CVE-2026-0059) allows for remote code execution. The rise of commercial spyware vendors poses a growing risk as they develop sophisticated exploits for government clients.