Android Security Enhancements: Google Addresses 120 Vulnerabilities, Including Two Actively Exploited Ones

In a recent development, Google has released the September Android Security Bulletin, which addresses a total of 120 patched vulnerabilities. Among these, two critical remote code execution vulnerabilities, CVE-2025-48539 and CVE-2025-38352, pose significant risks to Android users.

CVE-2025-48539, classified as high-risk by Google, allows attackers to execute arbitrary code without user interaction or additional rights. This vulnerability, which lacks a CVSS score at present, could potentially be used for malicious activities such as data theft or system takeover.

Google has withheld technical details about the attacks involving CVE-2025-48539 to prevent potential misuse. Similarly, no details about the attacks involving another vulnerability, CVE-2025-48539, have been provided by Google to maintain security.

Benoît Sevens from Google's Threat Analysis Group (TAG) discovered CVE-2025-38352, which affects the Linux kernel. This vulnerability could be used for local privilege escalation. It has a CVSS score of 7.4, suggesting potential use in sophisticated spyware attacks.

In an effort to enhance Android app security, Google has tightened its security requirements for Android apps.

Another concerning issue that has come to light is a major ad fraud operation named "Mirage" that has affected the Android App Store. IAS (Integral Ad Science) has uncovered this operation, highlighting the need for users to remain vigilant and install the latest updates to protect their devices.

In addition to these updates, Facebook has introduced Passkey login for Android and iOS, aiming to provide a more secure and convenient login experience for users.

Users are strongly urged to install the latest updates to address the patched vulnerabilities and ensure the security of their devices. Google has released two new patch levels (2025-09-01 and 2025-09-05) to enable partners to react swiftly.

Stay safe and keep your devices updated!

Android Security Enhancements: Google Addresses 120 Vulnerabilities, Including Two Actively Exploited Ones