30 June 2026 - 18:10

Category: IT Fail

Hooray, another Android zero-day.

Google has patched 124 things in Android, including yet another actively exploited zero-day privilege escalation flaw. I suppose we should act surprised.

Hooray, another Android zero-day.

Source: Pradeo

The Full Story

Severity: Critical Mood: Expected

Google has blessed us with a massive June update to patch 124 vulnerabilities, because why write secure code the first time when you can just patch it later? The star of this exhausting show is CVE-2025-48595, a lovely framework-level zero-day that lets attackers gracefully elevate their privileges to system level without any user interaction. To protect our endlessly vulnerable Android users from this active threat, we are expected to scramble and apply these patches within three days as CISA desperately commands.

#patchtuesday #neverending
Open article →