Back to today’s briefing

Story perspectives

Google Urges Updates After Critical Android Security Flaws

12/4/2025

24 4

Summary

Story summary

Google released the December 2025 Android Security Bulletin, with Pixel devices receiving patches more quickly.
The bulletin highlights two high-severity zero-day flaws, CVE-2025-48633 and CVE-2025-48572.
The U.S. Cybersecurity and Infrastructure Security Agency confirmed active exploitation of these flaws.
Another critical flaw, CVE-2025-48631, poses a denial-of-service risk.
Users are urged to update devices to mitigate these risks.

1 of 1

Story summary

Google released the December 2025 Android Security Bulletin, with Pixel devices receiving patches more quickly.
The bulletin highlights two high-severity zero-day flaws, CVE-2025-48633 and CVE-2025-48572.
The U.S. Cybersecurity and Infrastructure Security Agency confirmed active exploitation of these flaws.
Another critical flaw, CVE-2025-48631, poses a denial-of-service risk.
Users are urged to update devices to mitigate these risks.