Multiple vulnerabilities in Android, including CVE-2025-48595 (CVSS 8.4 High), allow remote attackers to achieve denial of service, remote code execution, privilege escalation, and information disclosure. The vulnerabilities affect Android devices with a security patch level prior to 2026-06-01, and the vendor-provided solution is to apply the fixes detailed in the Android Security Bulletin for that date.
Multiple vulnerabilities were identified in Android. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution and sensitive information disclosure on the targeted system. Note: CVE-2025-48595 is being scattered exploited... Impact Denial of Service Remote Code Execution Elevation of Privilege Information Disclosure System / Technologies affected Android security patch level prior to 2026-06-01 Solutions Before installation of the software, please visit the vendor web-site for more details. Apply fixes issued by the vendor: https://source.android.com/docs/security/bulletin/2026/2026-06-01