{"cvss":7.8,"datePublished":"2025-12-02","dateUpdated":"2025-12-02","description":"Android Framework contains an unspecified vulnerability that allows for privilege escalation.","dueDate":"2025-12-23","id":"CVE-2025-48572","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://source.android.com/docs/security/bulletin/2025-12-01 ; https://nvd.nist.gov/vuln/detail/CVE-2025-48572","product":"Framework","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","severity":"HIGH","source":"cisa_known_exploited","title":"Android Framework Privilege Escalation Vulnerability","vendor":"Android"}