New Android 14, 15 And 16 Update Fixes Actively Exploited Security Flaw

Google’s June 2026 Android security bulletin fixes CVE-2025-48595, an actively exploited zero-day in the Android Framework.

The flaw affects Android 14, 15, 16, and 16 QPR2, and can be abused locally without authentication or user interaction.

Successful exploitation can elevate privileges and potentially give attackers full control of a device.

Users are urged to install the 2026-06-05 security patch level as soon as it becomes available.