CVE-2025-48618 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking. This could lead to ph…
Medium CVSS: 6.8

CVE-2025-48618

In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Vendor
Google
Product
Android
CWE
CWE-667
Yayın Tarihi
2025-12-08 17:16:18
Güncelleme
2025-12-08 20:15:50
Source Identifier
security@android.com
KEV Date Added
-

Kategoriler

CWE-667 Android MEDIUM Google 2025

Referanslar

https://android.googlesource.com/platform/frameworks/opt/telephony/+/fee68bcdcf029e8f40980616d09367610544bc62 https://source.android.com/security/bulletin/2025-12-01