Google has released the June 2026 Android security updates, fixing 124 vulnerabilities, including one zero-day flaw that has already been exploited in targeted attacks.
The actively exploited issue is tracked as CVE-2025-48595 and affects the Android Framework. Google rates it as high severity. Local attackers could exploit the flaw on devices running Android 14 or later to execute code and gain higher privileges.
Google said there are signs that CVE-2025-48595 may have been used in limited, targeted attacks. The company has not shared technical details about the vulnerability or revealed who may have been targeted. Similar Android flaws have previously been used by commercial spyware vendors and nation-state hackers against high-profile individuals.
Google also noted that newer versions of Android include security improvements that make many types of exploitation harder. The company encouraged users to update to the latest Android version whenever possible.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
