United States: Google patches actively exploited Android flaw
Tap title to read story
Google has released emergency security updates for Android to fix 124 documented vulnerabilities, including CVE-2025-48595, a privilege escalation flaw that the company confirms is already being actively exploited in targeted attacks. The vulnerability affects devices running Android 14, Android 15, Android 16, and Android 16 QPR2 that have not yet installed the June 2026 security patch. With a CVSS severity score of 8.4, the bug allows attackers to gain unauthorized privilege levels on affected smartphones and tablets. Google advises users to promptly check for and install the latest system updates to reduce the risk of unauthorized access and data compromise.
More context
Timeline
- Early 2026: Privilege escalation exploit observed
- June 2026: Google issues emergency Android patches
- June 2026: CVE-2025-48595 details publicly disclosed
- June 2026: Vulnerability rated 8.4 CVSS high-severity
- June 2026: Active attacks target unpatched Android devices
- June 2026: Security bulletin urges immediate user updates
- June 2026: Patch coverage spans Android 14–16 releases
- Following weeks: Carriers begin distributing firmware updates
Why it matters
Your Android device could be at risk. This bug lets hackers gain unauthorized access. They could steal your personal data. Check your device for updates today. It's about your privacy and safety.
JQJO Editorial Desk · Human reviewed · AI assisted. Report a correction.
