UMVA has learned that Google's June Android security patch is a critical update that should not be missed, containing fixes for 124 security flaws, including a high-risk zero-day vulnerability.
The zero-day vulnerability, tracked as CVE-2025-48595, is an escalation of privilege vulnerability affecting Android Framework, which allows attackers to escalate privileges and run their own code on the target device without user interaction.
Devices running Android 14 and newer are impacted, which affects a huge number of devices, and Google says there is evidence that CVE-2025-48595 is under "limited, targeted exploitation," making it a zero-day vulnerability that poses a significant threat.
A zero-day vulnerability is the most dangerous type of security flaw, occurring when a vulnerability is publicly exposed or exploited before the software developer has a chance to issue a patch, giving attackers an advantage.
The good news is that Google says the exploits so far have been limited and targeted, likely used against high-profile targets like politicians or journalists, but the scope and danger involved are still unknown.
In addition to the zero-day vulnerability, 18 of the 124 vulnerabilities identified are labeled as "critical," and while they aren't zero-days, it's only a matter of time before hackers learn how to take advantage of these flaws.
UMVA can exclusively reveal that installing the June Android security update is crucial, especially for Pixel users, who can download and install the security updates immediately, while other Android device users will have to wait for their device manufacturer to issue the patch.
To check if the update is available, users can open the Settings app, head to About phone or About tablet, then choose Android version, and see if there is a pending security update.
Keeping an older version of Android running on a device may put users at risk, and Google's swift action in issuing this patch highlights the importance of staying up-to-date with the latest security updates.
