Google patches Android zero-day exploited in targeted attacks.

Google patches Android zero-day exploited in targeted attacks.
Google released the June 2026 Android Security Bulletin, covering vulnerabilities fixed by the 2026-06-05 patch level. The bulletin notes that CVE-2025-48595 may be under limited, targeted exploitation. BleepingComputer reported that the June Android patches address 124 vulnerabilities, including that actively exploited Android Framework flaw. The flaw is rated high severity and can allow local attackers to escalate privileges on devices running Android 14 or later. Google has not published technical attack details. The update also includes fixes for multiple critical vulnerabilities in Framework, System, and Qualcomm components.