CVE-2025-48572: high-severity vulnerability in Google Android
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
An app can launch activities in the background without proper permission checks, allowing it to escalate its privileges on the device without the user's knowledge or action.
A permissions bypass in activity launching mechanisms allows unprivileged background processes to invoke restricted activities without proper authorization checks. Exploitation requires no additional privileges or user interaction, resulting in local privilege escalation with high impact on system integrity.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.