CVE-2025-48572Patch(google / android)

MEDIUMCVSS 7.8 · HIGHCISA KEV

Exploitation observed; activity peaked at 6 mentions and remains active

Immediate actions

Patch google android systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

google CVEs Back to dashboard

4.0/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2025-12-23. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Vendor / third-party advisories

Other references

https://android.googlesource.com/platform/frameworks/base/+/e707f6600330691f9c67dc023c09f4cd2fc59192

Weakness type (CWE)

CWE-306

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

RISING

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

android

Threat summary

Active exploitation appears in 11 classified signals
Patch or workaround signal is available
11 mentions across 5 observed days
Momentum state: rising

What's happening

Active exploitation reported across 11 signals
Patch or workaround mentioned in 11 signals
Peaked 2d ago at 6 mentions (2026-02-08); latest day: 1
11 total mentions across 5 days

Affected systems

Vendors

google

Products

android

4 versions affected across 1 product

Deep dive

Activity timeline11 mentions / 5d

Signal classification2 categories

Patch

872.7%

Active Exploitation

327.3%

Referenced assets1 URL

By indicator

https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/

Classification over time

Date	Total	Labels

2026-02-03	1	Patch1
2026-02-06	2	Active Exploitation1Patch1
2026-02-08	6	Patch6
2026-02-12	1	Active Exploitation1
2026-06-02	1	Active Exploitation1

Full discourse11 posts

Trio Soft inc@triosoftinc129d
Active Exploitation
👉 CVE-2025-48633 and CVE-2025-48572. Both actively exploited. Both patched in one December bulletin. A 30-day postpone window would have left your fleet exposed for that entire period. Worth checking your current policy setting before June 8.
Post summary
Both CVE-2025-48633 and CVE-2025-48572 are reported as actively exploited, but patches were released in a December bulletin; users should review policy settings before June 8.
0001024
23 followersView on X
Novo IT Ltd@novo_ltd239d
Active Exploitation
📱 Google patched 51 Android flaws — including 2 serious ones already being exploited. Pixel or Samsung user? Update now! 🔒 https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/ #Android #CyberSecurity #TechUpdate #MobileSecurity
Post summary
Google patched 51 Android flaws, with two serious vulnerabilities already being actively exploited; users are urged to update immediately.
0000050
5 followersView on X
Intechtel@Intechtel242d
Patch
Google has released patches for 51 Android vulnerabilities, including two high-severity flaws currently under targeted exploitation. If you have a Pixel or Samsung device, check for the December security update now. #Android #MobileSecurity #TechUpdate #C https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/
Post summary
Google released Android security patches for 51 vulnerabilities, two of which are high‑severity and currently under targeted exploitation; users are urged to apply the December update.
0000052
47 followersView on X
Syzygy 3@Syzygy3242d
Patch
Google has released patches for 51 Android vulnerabilities, including two high-severity flaws currently under targeted exploitation. If you have a Pixel or Samsung device, check for the December security update now. #Android #MobileSecurity #TechUpdate #C https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/
Post summary
Google announced it has released patches for 51 Android vulnerabilities, including two high‑severity flaws that are currently being actively exploited; users are urged to apply the December update.
0000050
237 followersView on X
elevatetechnology@elev8technology242d
Patch
Google has released patches for 51 Android vulnerabilities, including two high-severity flaws currently under targeted exploitation. If you have a Pixel or Samsung device, check for the December security update now. https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/ #Android #MobileSecurity #CyberSecurity https://t.co/1dl4awV1fc
Post summary
Google has issued patches for 51 Android flaws, including two high‑severity CVEs that are reportedly being targeted in the wild, urging Pixel and Samsung users to apply the December update.
0000058
6 followersView on X
UnifiedTechs@UnifiedTechs242d
Patch
Google has released patches for 51 Android vulnerabilities, including two high-severity flaws currently under targeted exploitation. If you have a Pixel or Samsung device, check for the December security update now. #Android #MobileSecurity #TechUpdate #C https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/
Post summary
Google released patches for 51 Android vulnerabilities, including two high‑severity flaws that are actively exploited; users of Pixel and Samsung devices are urged to install the December update.
0000053
131 followersView on X
ZEFSINA NETWORKS@Zefsina243d
Patch
Google has released patches for 51 Android vulnerabilities, including two high-severity flaws currently under targeted exploitation. If you have a Pixel or Samsung device, check for the December security update now. #Android #MobileSecurity #TechUpdate https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/
Post summary
Google’s December security update patches 51 Android vulnerabilities, including two high‑severity flaws that are currently being actively exploited; Pixel and Samsung users are urged to install the update.
0000058
View on X
Affinity Smart@affinitysmart243d
Patch
Google has released patches for 51 Android vulnerabilities, including two high-severity flaws currently under targeted exploitation. If you have a Pixel or Samsung device, check for the December security update now. #Android #MobileSecurity #TechUpdate #C https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/
Post summary
Google released the December Android security update addressing 51 vulnerabilities, including two high‑severity flaws that are reportedly being actively exploited; Pixel and Samsung users are advised to install the patch.
0000049
30 followersView on X
digitaldentist@digitaldentist245d
Active Exploitation
Google has released patches for 51 Android vulnerabilities, including two high-severity flaws currently under targeted exploitation. If you have a Pixel or Samsung device, check for the December security update now. #Android #MobileSecurity #TechUpdate #C https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/
Post summary
Google issued patches for 51 Android CVEs, with two high‑severity flaws reportedly being actively exploited; users of Pixel and Samsung devices should apply the December update.
0000073
15.8K followersView on X
Dual Layer IT Solutions Ltd.@DualLtd245d
Patch
Google has released patches for 51 Android vulnerabilities, including two high-severity flaws currently under targeted exploitation. If you have a Pixel or Samsung device, check for the December security update now. #Android #MobileSecurity #CyberSecurity https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/
Post summary
Google released the December security update patching 51 Android vulnerabilities, including two high‑severity flaws currently under targeted exploitation; users should update.
0000074
17 followersView on X
ESP Projects Ltd@ESPProjects248d
Patch
Google has released patches for 51 Android vulnerabilities, including two high-severity flaws currently under targeted exploitation. If you have a Pixel or Samsung device, check for the December security update now. https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/ #Android #CyberSecurity #espprojects https://t.co/ZRtxZHeQgF
Post summary
Google released December security updates for 51 Android vulnerabilities, including two high‑severity flaws that are presently being actively exploited; users of Pixel or Samsung devices are urged to apply the patches.
0000067
1.3K followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	google	android	13.0	-	-
OS	google	android	14.0	-	-
OS	google	android	15.0	-	-
OS	google	android	16.0	-	-

Explore more

Back to dashboard google CVEs android vulnerabilities

What researchers are saying

CVE-2025-48572

Trio Soft inc@triosoftincActive Exploitation

Both CVE-2025-48633 and CVE-2025-48572 are reported as actively exploited, but patches were released in a December bulletin; users should review policy settings before June 8.

Novo IT Ltd@novo_ltdActive Exploitation

Google patched 51 Android flaws, with two serious vulnerabilities already being actively exploited; users are urged to update immediately.

Intechtel@IntechtelPatch

Google released Android security patches for 51 vulnerabilities, two of which are high‑severity and currently under targeted exploitation; users are urged to apply the December update.

Syzygy 3@Syzygy3Patch

Google announced it has released patches for 51 Android vulnerabilities, including two high‑severity flaws that are currently being actively exploited; users are urged to apply the December update.

elevatetechnology@elev8technologyPatch

Google has issued patches for 51 Android flaws, including two high‑severity CVEs that are reportedly being targeted in the wild, urging Pixel and Samsung users to apply the December update.

UnifiedTechs@UnifiedTechsPatch

Google released patches for 51 Android vulnerabilities, including two high‑severity flaws that are actively exploited; users of Pixel and Samsung devices are urged to install the December update.

ZEFSINA NETWORKS@ZefsinaPatch

Google’s December security update patches 51 Android vulnerabilities, including two high‑severity flaws that are currently being actively exploited; Pixel and Samsung users are urged to install the update.

Affinity Smart@affinitysmartPatch

Google released the December Android security update addressing 51 vulnerabilities, including two high‑severity flaws that are reportedly being actively exploited; Pixel and Samsung users are advised to install the patch.