Google Patches Android Zero-Day and 124 Flaws

TL;DR. Google issued its June 2026 Android security updates, addressing 124 vulnerabilities, including one actively exploited zero-day flaw. - The zero-day flaw, CVE-2025-48595, allows local attackers to execute code and escalate privileges on Android 14 and newer devices. - Google notes that the exploit is limited and targeted, similar to past attacks by commercial spyware and nation-states. - The update also fixed 18 critical vulnerabilities across System, Framework, and Qualcomm components, some requiring no user interaction.

• Google released June 2026 Android security patches.
• One zero-day (CVE-2025-48595) is actively exploited in targeted attacks.
• The zero-day allows privilege escalation and code execution on Android 14+.
• 18 critical vulnerabilities were also fixed, some with remote privilege escalation.
• Pixel devices receive updates immediately; other vendors will follow.

Back to QLANKR News