Android Security Bulletin — June 2026
Monday, 1 June 2026
Exploited 1
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
-
High 8.4
CVE-2025-48595 Zero-day Public exploit In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no a…EPSS 1.9%
Critical 1
- Critical 10.0
Public exploit code 3
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
- High 7.8
- High 7.8
- High 7.8
All vulnerabilities 61
Critical1 ShowHide
- Critical 10.0
High30 ShowHide
-
High 8.4
CVE-2025-48595 Zero-day Public exploit In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no a…EPSS 1.9%
- High 8.0
- High 8.0
- High 8.0
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
Medium25 ShowHide
- Medium 6.8
- Medium 6.8
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.2
- Medium 6.2
- Medium 5.9
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 4.0
Low5 ShowHide
- Low 3.3
- Low 3.3
- Low 3.3
- Low 3.3
- Low 3.3