Skip to content
OpenAdvisories
High · 8.0 CVE-2025-48640 EUVD-2025-210215GHSA-q4v6-96fx-w43h

In multiple locations, there is a possible 3rd party passkey entry pairing approval due to a missing permission check. This could lead to r…

Published Jun 17, 2026 · Updated Jun 18, 2026 · Assigned by google_android

Description

In multiple locations, there is a possible 3rd party passkey entry pairing approval due to a missing permission check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 17 —

Advisories 1

References