CVE-2025-48633Patch(google / android)

MEDIUMCVSS 5.5 · MEDIUMCISA KEV

Exploitation observed; activity peaked at 6 mentions and remains active

Immediate actions

Patch google android systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

google CVEs Back to dashboard

4.0/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2025-12-23. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Patch / fix

https://android.googlesource.com/platform/frameworks/base/+/d00bcda9f42dcf272d329e9bf9298f32af732f93

Vendor / third-party advisories

https://source.android.com/security/bulletin/2025-12-01

Other references

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48633

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

RISING

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

android

Threat summary

Active exploitation appears in 11 classified signals
Patch or workaround signal is available
11 mentions across 5 observed days
Momentum state: rising

What's happening

Active exploitation reported across 11 signals
Patch or workaround mentioned in 11 signals
Peaked 2d ago at 6 mentions (2026-02-08); latest day: 1
11 total mentions across 5 days

Affected systems

Vendors

google

Products

android

4 versions affected across 1 product

Deep dive

Activity timeline11 mentions / 5d

Signal classification2 categories

Patch

981.8%

Active Exploitation

218.2%

Referenced assets1 URL

By indicator

https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/

Classification over time

Date	Total	Labels

2026-02-03	1	Patch1
2026-02-06	2	Patch2
2026-02-08	6	Patch6
2026-02-12	1	Active Exploitation1
2026-06-02	1	Active Exploitation1

Full discourse11 posts

Trio Soft inc@triosoftinc131d
Active Exploitation
👉 CVE-2025-48633 and CVE-2025-48572. Both actively exploited. Both patched in one December bulletin. A 30-day postpone window would have left your fleet exposed for that entire period. Worth checking your current policy setting before June 8.
Post summary
The post highlights that CVE-2025-48633 and CVE-2025-48572 were actively exploited in the wild, have been patched in a December bulletin, and urges checking fleet policy settings before June 8 to prevent exposure.
0001024
23 followersView on X
Novo IT Ltd@novo_ltd240d
Active Exploitation
📱 Google patched 51 Android flaws — including 2 serious ones already being exploited. Pixel or Samsung user? Update now! 🔒 https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/ #Android #CyberSecurity #TechUpdate #MobileSecurity
Post summary
Google has released patches for 51 Android vulnerabilities, two of which are reportedly being actively exploited; users are urged to update immediately.
0000050
5 followersView on X
Intechtel@Intechtel244d
Patch
Google has released patches for 51 Android vulnerabilities, including two high-severity flaws currently under targeted exploitation. If you have a Pixel or Samsung device, check for the December security update now. #Android #MobileSecurity #TechUpdate #C https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/
Post summary
Google released patches for 51 Android CVEs, including two high‑severity flaws under targeted exploitation, and advises Pixel and Samsung users to apply the December update.
0000052
47 followersView on X
Syzygy 3@Syzygy3244d
Patch
Google has released patches for 51 Android vulnerabilities, including two high-severity flaws currently under targeted exploitation. If you have a Pixel or Samsung device, check for the December security update now. #Android #MobileSecurity #TechUpdate #C https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/
Post summary
Google released security patches for 51 Android CVEs, including two high‑severity flaws that are currently being actively exploited. Users with Pixel or Samsung devices should install the December update immediately.
0000050
237 followersView on X
elevatetechnology@elev8technology244d
Patch
Google has released patches for 51 Android vulnerabilities, including two high-severity flaws currently under targeted exploitation. If you have a Pixel or Samsung device, check for the December security update now. https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/ #Android #MobileSecurity #CyberSecurity https://t.co/1dl4awV1fc
Post summary
Google released patches for 51 Android vulnerabilities, highlighting two high‑severity flaws that are under active exploitation; users are urged to apply the December security update.
0000058
6 followersView on X
UnifiedTechs@UnifiedTechs244d
Patch
Google has released patches for 51 Android vulnerabilities, including two high-severity flaws currently under targeted exploitation. If you have a Pixel or Samsung device, check for the December security update now. #Android #MobileSecurity #TechUpdate #C https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/
Post summary
Google has released December security patches for 51 Android vulnerabilities, with two high‑severity flaws reportedly under active targeted exploitation; users of Pixel and Samsung devices are urged to install the update immediately.
0000053
131 followersView on X
ZEFSINA NETWORKS@Zefsina244d
Patch
Google has released patches for 51 Android vulnerabilities, including two high-severity flaws currently under targeted exploitation. If you have a Pixel or Samsung device, check for the December security update now. #Android #MobileSecurity #TechUpdate https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/
Post summary
Google issued December security updates for 51 Android vulnerabilities, including two high‑severity flaws currently being actively exploited; users with Pixel or Samsung devices are urged to install the patches immediately.
0000058
View on X
Affinity Smart@affinitysmart245d
Patch
Google has released patches for 51 Android vulnerabilities, including two high-severity flaws currently under targeted exploitation. If you have a Pixel or Samsung device, check for the December security update now. #Android #MobileSecurity #TechUpdate #C https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/
Post summary
Google released patches for 51 Android vulnerabilities, including two high‑severity flaws reportedly under targeted exploitation; users with Pixel or Samsung devices should apply the December security update.
0000049
30 followersView on X
digitaldentist@digitaldentist246d
Patch
Google has released patches for 51 Android vulnerabilities, including two high-severity flaws currently under targeted exploitation. If you have a Pixel or Samsung device, check for the December security update now. #Android #MobileSecurity #TechUpdate #C https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/
Post summary
Google released patches for 51 Android vulnerabilities, noting that two high‑severity flaws are under targeted exploitation.
0000073
15.8K followersView on X
Dual Layer IT Solutions Ltd.@DualLtd247d
Patch
Google has released patches for 51 Android vulnerabilities, including two high-severity flaws currently under targeted exploitation. If you have a Pixel or Samsung device, check for the December security update now. #Android #MobileSecurity #CyberSecurity https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/
Post summary
Google has issued patches for 51 Android vulnerabilities, including two high-severity flaws that are reportedly being actively exploited; users are urged to install the December security update.
0000074
17 followersView on X
ESP Projects Ltd@ESPProjects250d
Patch
Google has released patches for 51 Android vulnerabilities, including two high-severity flaws currently under targeted exploitation. If you have a Pixel or Samsung device, check for the December security update now. https://www.helpnetsecurity.com/2025/12/02/android-cve-2025-48633-cve-2025-48572/ #Android #CyberSecurity #espprojects https://t.co/ZRtxZHeQgF
Post summary
Google released patches for 51 Android vulnerabilities, including two high‑severity flaws that are being actively exploited; users are urged to apply the December security update.
0000067
1.3K followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	google	android	13.0	-	-
OS	google	android	14.0	-	-
OS	google	android	15.0	-	-
OS	google	android	16.0	-	-

Explore more

Back to dashboard google CVEs android vulnerabilities

What researchers are saying

CVE-2025-48633

Trio Soft inc@triosoftincActive Exploitation

The post highlights that CVE-2025-48633 and CVE-2025-48572 were actively exploited in the wild, have been patched in a December bulletin, and urges checking fleet policy settings before June 8 to prevent exposure.

Novo IT Ltd@novo_ltdActive Exploitation

Google has released patches for 51 Android vulnerabilities, two of which are reportedly being actively exploited; users are urged to update immediately.

Intechtel@IntechtelPatch

Google released patches for 51 Android CVEs, including two high‑severity flaws under targeted exploitation, and advises Pixel and Samsung users to apply the December update.

Syzygy 3@Syzygy3Patch

Google released security patches for 51 Android CVEs, including two high‑severity flaws that are currently being actively exploited. Users with Pixel or Samsung devices should install the December update immediately.

elevatetechnology@elev8technologyPatch

Google released patches for 51 Android vulnerabilities, highlighting two high‑severity flaws that are under active exploitation; users are urged to apply the December security update.

UnifiedTechs@UnifiedTechsPatch

Google has released December security patches for 51 Android vulnerabilities, with two high‑severity flaws reportedly under active targeted exploitation; users of Pixel and Samsung devices are urged to install the update immediately.

ZEFSINA NETWORKS@ZefsinaPatch

Google issued December security updates for 51 Android vulnerabilities, including two high‑severity flaws currently being actively exploited; users with Pixel or Samsung devices are urged to install the patches immediately.

Affinity Smart@affinitysmartPatch

Google released patches for 51 Android vulnerabilities, including two high‑severity flaws reportedly under targeted exploitation; users with Pixel or Samsung devices should apply the December security update.