Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited

Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited Ravie LakshmananJun 02, 2026Vulnerability / Mobile Security Google on Monday released patches for 124 security vulnerabilities impacting its Android operating system for the month of June 2026, including one high-severity flaw in the Framework component that has come under active exploitation. Tracked as CVE-2025-48595 (CVSS score: 8.4), the security flaw has been described as a case of privilege escalation without requiring any user interaction. The vulnerability impacts devices running Android versions 14, 15, 16, and 16 QPR2 (Quarterly Platform Release 2). "In multiple locations, there is a possible way to achieve code execution due to an integer overflow," according to a description of the vulnerability on CVE.org. "This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation." Google has acknowledged there are indications that CVE-2025-48595 may be under "limited, targeted exploitation." As is typically the case, the tech giant did not reveal any specifics about who may have been behind the activity, the targets affected, and the scale of such efforts. That said, similar flaws have been weaponized by commercial spyware vendors to target high-profile individuals as part of extremely targeted attacks. Elsewhere, a number of vulnerabilities have been patched in the System component, the most severe of which could lead to local escalation of privilege with no additional execution privileges needed. Google has released two sets of patches - 2026-06-01 and 2026-06-05 security patch levels - with the latter including all fixes from the first set, along with patches for kernel and third-party chipset components from Imagination Technologies, MediaTek, Qualcomm, and Unisoc. Found this article interesting? Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post. SHARE     Tweet Share Share SHARE  Android, cybersecurity, Google, mobile security, operating system, privilege escalation, Threat Intelligence, Vulnerability ⚡ Top Stories This Week Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension 9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerability Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation Flaws Making Vulnerable Drivers Exploitable Without Hardware - The BYOVD Perspective Developer Workstations Are Now Part of the Software Supply Chain GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal Repos NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories The New Phishing Click: How OAuth Consent Bypasses MFA Microsoft Warns of Two Actively Exploited Defender Vulnerabilities ⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems Load More ▼ ⭐ Featured Resources Claim ANY.RUN Anniversary Offer for Faster Malware Analysis [Guide] Learn to Detect AI Typosquatting Risks in Your Domain Discover How to Navigate the Era of Constant Cyber Exposure [Guide] Get Key Identity Security Insights From 2026 Snapshot