CVE-2025-48572

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-48572 is a high-severity elevation-of-privilege (EoP) vulnerability affecting Android versions 13 through 16. It exists within the Android Framework component. Google's security team has indicated that this vulnerability is under limited, targeted exploitation in the wild. Successful exploitation of CVE-2025-48572 could allow attackers to gain administrative control over affected devices. Google has released security patches as part of the December 2025 Android Security Bulletin to address this and other vulnerabilities. Users are advised to update their devices to the latest patch level as soon as the updates are available.

Description
-

Social media

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score

1

  1. Androidで重大な脆弱性と2件のゼロデイ- 12月セキュリティパッチで緊急修正(CVE-2025-48631,CVE-2025-48633,CVE-2025-48572) https://t.co/CjVBuo8h97 #セキュリティ対策Lab #セキュリティ #Security

    @securityLab_jp

    4 Dec 2025

    6 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. ⚠️ Vulnerabilidades en productos Android ❗ CVE-2025-48631 ❗ CVE-2025-48572 ❗ CVE-2025-48533 ➡️ Más info: https://t.co/FgS6JLtQmr https://t.co/t7uPFASFFb

    @CERTpy

    3 Dec 2025

    31 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. Google Patches Actively Exploited Android Security Flaws https://t.co/cbK5rupwyr #cve-2025-48572 #cve-2025-48633

    @wizconsults

    3 Dec 2025

    34 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  4. 🚨Upozorňujeme na aktivně zneužívané zranitelnosti v Android Framework, CVE-2025-48633 a CVE-2025-48572. Zranitelnost CVE-2025-48633 umožňuje útočníkovi získat citlivá data z prostředí systému. CVE-2025-48572 umožňuje získání vyšších oprávnění v systé

    @GOVCERT_CZ

    3 Dec 2025

    766 Impressions

    2 Retweets

    5 Likes

    1 Bookmark

    0 Replies

    0 Quotes

  5. 🛡️ @Google December Android update fixes 107 vulnerabilities, including 2 Framework bugs already exploited in the wild. • CVE-2025-48633 – info disclosure • CVE-2025-48572 – privilege escalation • + a critical DoS flaw: CVE-2025-48631 Have you updated your devices

    @TechNadu

    3 Dec 2025

    82 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  6. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two high-severity Android vulnerabilities—CVE-2025-48572 (a privilege escalation flaw) and CVE-2025-48633 (an information disclosure issue)—to its Known Exploited Vulnerabilities (KEV) catalog, shortly

    @MatrixBlank

    3 Dec 2025

    78 Impressions

    1 Retweet

    0 Likes

    1 Bookmark

    0 Replies

    0 Quotes

  7. 🚨 Google’s Android December 2025 security update fixes 107 flaws, including 2 Framework zero-days (CVE-2025-48572 & CVE-2025-48633) already exploited in the wild + added to CISA KEV. Breakdown, impact & patch guidance 👇 https://t.co/NjswM5N5v9 #Android #CyberSecur

    @vulert_official

    3 Dec 2025

    1 Impression

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  8. Uyarı: CVE-2025-48633 ve CVE-2025-48572 hâlihazırda aktif olarak istismar ediliyor — Google işaret etmişti, şimdi ABD siber ajansı da doğruladı. Sistemlerinizi yamaladınız mı? #PatchYourSystems https://t.co/wYzxQpeHFI

    @Siber_Kalkan_

    3 Dec 2025

    52 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  9. Active exploits confirmed: CISA verifies active exploitation of CVE-2025-48633 and CVE-2025-48572 — patch now, monitor logs, and tighten access controls. Are your systems covered? #Explotación_Activa_CVE2025_48633_48572 https://t.co/zWOTtYJDab

    @CyberDailyPost

    3 Dec 2025

    56 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  10. Подтверждено: активная эксплуатация уязвимостей CVE-2025-48633 и CVE-2025-48572 — Google отмечал «признаки», теперь это подтвердило американское киберведомство. Как р

    @cybereye_ru

    3 Dec 2025

    51 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  11. تحذير: استغلال نشط لثغرتَي CVE-2025-48633 وCVE-2025-48572 مؤكَّد — جوجل رصدت إشارات والوكالة الأمريكية للأمن السيبراني أكدتها. هل طبقت التصحيحات وتحققت من سجلاتك؟ #Patc

    @Cybereayn

    3 Dec 2025

    57 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  12. ئاگاداریەکی گرنگ: CVE-2025-48633 و CVE-2025-48572 بە شێوەی چالاک هێرش دەکرێن. گووگڵ نیشانەکان ڕاگەیاند و ئێستا ئەژانسەی سایبەری ئەمریکا پشتڕاستیان کرد. تۆ چی دەکەیت؟ #

    @CaveSiberKurdi

    3 Dec 2025

    46 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  13. 米国CISAが悪用を確認した脆弱性 #KEV をカタログに追加しました。(12/2追加) 🛡️No.1467 CVE-2025-48572 Android Framework Privilege Escalation Vulnerability ============= 種別:特権昇格(Android Security Team) 深刻度:重要 🛡️N

    @piyokango

    3 Dec 2025

    4271 Impressions

    2 Retweets

    10 Likes

    1 Bookmark

    0 Replies

    0 Quotes

  14. CISA has added two vulnerabilities to the KEV Catalog: CVE-2025-48633: Android Framework Information Disclosure Vulnerability CVE-2025-48572: Android Framework Privilege Escalation Vulnerability https://t.co/9idGUAHIKd

    @DarkWebInformer

    2 Dec 2025

    3378 Impressions

    3 Retweets

    20 Likes

    3 Bookmarks

    1 Reply

    1 Quote

  15. Google patched 107 Android vulnerabilities this month, including two actively exploited zero-days (CVE-2025-48633 & CVE-2025-48572) enabling privilege escalation and data access. #AndroidSecurity #ZeroDay #UnitedStates https://t.co/bbz3Dh8NHm

    @TweetThreatNews

    2 Dec 2025

    161 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  16. 🛡️ We added Android framework vulnerabilities CVE-2025-48572 & CVE-2025-48633 to our Known Exploited Vulnerabilities Catalog. Visit https://t.co/myxOwap1Tf & apply mitigations to protect your org from cyberattacks. #Cybersecurity #InfoSec https://t.co/shAU5gIzHa

    @CISACyber

    2 Dec 2025

    5974 Impressions

    17 Retweets

    44 Likes

    0 Bookmarks

    4 Replies

    0 Quotes

  17. Google patched 107 Android security flaws, including 2 (CVE-2025-48633 and CVE-2025-48572) critical ones confirmed to be actively exploited in the wild. Users are recommended to update their devices to the latest patch level as soon as the patches are released. https://t.co/isnK

    @pixeluibygoogle

    2 Dec 2025

    4008 Impressions

    8 Retweets

    127 Likes

    8 Bookmarks

    1 Reply

    1 Quote

  18. گوگل ۲ آسیب پذیری با کدهای شناسایی CVE-2025-48633 از نوع افشای اطلاعات و CVE-2025-48572 از نوع privilege escalation را پچ‌ نمود.سیستم عامل های اندروید نسخه های ۱۳ تا ۱۶ دارای این

    @EthicalSafe

    2 Dec 2025

    44 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  19. Google fixes Android vulnerabilities “under targeted exploitation” (CVE-2025-48633, CVE-2025-48572) https://t.co/gOt5gR03x6 #HelpNetSecurity #Cybersecurity https://t.co/V0w6XPXkov

    @PoseidonTPA

    2 Dec 2025

    46 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  20. Your Android is vulnerable right now. Google just confirmed two active zero-day exploits are being used in "targeted attacks" against users. CVE-2025-48633 (steals your info). CVE-2025-48572 (gives hackers control). 107 total flaws patched in the December update. If you're h

    @AIRevSpot

    2 Dec 2025

    101 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  21. Security updates for Android have addressed 107 security flaws, including 2 High severity CVE's. CVE-2025-48572, a privilege escalation vulnerability, and CVE-2025-48633, an information disclosure vulnerability. Both of these vulnerabilities have had limited exploitation in the

    @Rastguyan_

    2 Dec 2025

    44 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  22. #Google fixes #Android vulnerabilities “under targeted exploitation” (CVE-2025-48633, CVE-2025-48572) https://t.co/hXfeVVhyFY https://t.co/uh2abVzJCD

    @evanderburg

    2 Dec 2025

    77 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  23. Urgent sécurité Android: deux zero-days (CVE-2025-48633, CVE-2025-48572) exploités touchent Android 13–16. MAJ 2025-12-01/12-05 corrige 107 failles. Vous avez mis à jour ? #MiseAJourAndroid https://t.co/J1mEXkizqA

    @CyberSentinelle

    2 Dec 2025

    47 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  24. Vulnerability Alert — Android December 2025 Google patched 107 Android flaws, including two Framework vulnerabilities (CVE-2025-48633, CVE-2025-48572) exploited in the wild and a critical DoS issue (CVE-2025-48631). Google notes signs of limited, targeted exploitation. https:/

    @CloneSystemsInc

    2 Dec 2025

    69 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  25. The zero-days, identified as CVE-2025-48633 and CVE-2025-48572, affect the platform’s Framework component and could be exploited for information disclosure or privilege escalation. Users are urged to update immediately. #cybersecurity https://t.co/ovMmsq67EX

    @GuardingPearSof

    2 Dec 2025

    82 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  26. Android Security Bulletin - December 2025 https://t.co/qNgpMJTWFx 7 crits, CVE-2025-48633 & CVE-2025-48572 exploited ITW

    @xvonfers

    2 Dec 2025

    3860 Impressions

    3 Retweets

    31 Likes

    18 Bookmarks

    0 Replies

    0 Quotes

  27. 🔐 تحديث أمان جديد من #Google يعالج 107 ثغرة في Android، بينها ثغرتان صفرية تم استغلالها فعلًا ⚠️ 🛡️ أخطرها: • CVE-2025-48633 → تسريب معلومات • CVE-2025-48572 → رفع صلاحيات

    @Infoandtech3

    2 Dec 2025

    70 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  28. ⚠️ Google just fixed 107 security flaws in Android — including two that hackers already used in real attacks. The exploited bugs (CVE-2025-48633 & CVE-2025-48572) affect the Android Framework and could expose data or give attackers higher access. Read: https://t.co/n8

    @TheHackersNews

    2 Dec 2025

    15009 Impressions

    69 Retweets

    178 Likes

    27 Bookmarks

    0 Replies

    1 Quote

References

Sources include official advisories and independent security research.