![\"Google](\"https:\/\/www.europesays.com\/ie\/wp-content\/uploads\/2025\/12\/1764702983_438_0x0.jpg\")
<\/p>\n<\/p>\n
Google confirms Android attacks.<\/p>\n
LightRocket via Getty Images<\/p>\n
Google has suddenly confirmed<\/a> Android is under attack, rushing out fixes for two vulnerabilities \u201cthat could lead to remote denial of service with no additional execution privileges needed.\u201d Manufacturers will receive new source code \u201cwithin 48 hours.\u201d<\/p>\n Google says there are \u201cindications\u201d that CVE-2025-48633 and CVE-2025-48572 \u201cmay be under limited, targeted exploitation.\u201d In addition to the two zero-days, more than 100 other patches are included in December\u2019s bumper update.<\/p>\n Forbes\u2018Disaster\u2019\u2014iPhone And Android VPN Ban \u2018Actually Happening\u2019By Zak Doffman<\/a><\/p>\n Both the high-severity exploited vulnerabilities affect Android\u2019s framework, and could lead to \u201cremote denial of service with no additional execution privileges needed.\u201d It seems almost certain that some form of malicious spyware is behind the exploits. Google will not issue any further detail until updates have been released.<\/p>\n The fact that Google has issued the update on the first day of the month is notable. That it includes so many fixes is attributable to Google\u2019s new process, whereby omnibus quarterly updates group fixes leaving the intervening months relatively clear. That said, the zero days would have been patched immediately anyway.<\/p>\n Neither vulnerability had been added to the U.S. cyber defense agency\u2019s Known Exploited Vulnerability<\/a> catalog by the end of Monday. You can expect both to be included within 24 to 48 hours, along with CISA\u2019s usual update mandate.<\/p>\n The December update was also added late in the day to Samsung\u2019s security page<\/a>. Again, you want this update quickly, given its seriousness. Unfortunately most Samsung users won\u2019t get these updates any time soon. Unlike Pixel<\/a> (and iPhone), it takes the course of the whole month to get updates across Samsung\u2019s entire install base.<\/p>\n