Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited
Summary: Google released June 2026 Android patches for 124 vulnerabilities, including a high-severity Framework flaw tracked as CVE-2025-48595 (CVSS 8.4) that allows privilege escalation with no user interaction on Android 14, 15, 16, and 16 QPR2. Google said the flaw, an integer overflow leading to code execution, may be under limited, targeted exploitation, and CISA added it to the KEV catalog on June 2, 2026, with a June 5, 2026 remediation deadline for FCEB agencies.
Why it matters: A flaw that needs no user interaction and is already being exploited in targeted attacks gives an attacker a path to elevated privileges on unpatched devices, and CISA's three-day remediation window for federal agencies signals how urgently it is being treated.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2025-48595
- Related
- CVE-2025-48595: Android Framework Integer Overflow Vulnerability Known Exploited Vulnerabilities · Jun 02, 2026