cve detail

CVE-2025-48572

naam

Android Framework Privilege Escalation Vulnerability

Android Framework contains an unspecified vulnerability that allows for privilege escalation.

KEV

bekend misbruikt

EPSS

0,2%

percentiel

43%

vendor

Android

product

Framework

toegevoegd aan KEV

02 dec 2025

due date

23 dec 2025

ransomware

Unknown

CWE

EPSS datum

12 mei 2026

aanbevolen actie

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

notities

https://source.android.com/docs/security/bulletin/2025-12-01 ; https://nvd.nist.gov/vuln/detail/CVE-2025-48572