Android users urged to update system urgently

Google has published a monthly security report announcing the release of an urgent update for the Android operating system. The update aims to fix 84 identified vulnerabilities, with two of them already being actively exploited by attackers.

The focus is on the zero-day vulnerability CVE-2025-38352, which allows privilege escalation in the Android kernel. This security breach was first discovered in July 2025 during attacks on Linux users, and now its exploitation has been confirmed in the Android system as well. The second critical vulnerability - CVE-2025-48543 - affects the Android Runtime component and also provides the possibility of privilege escalation.

According to Google, devices running Android versions 13-16 are at risk. The company strongly recommends users install security updates as soon as possible. It is also noted that some vulnerabilities affect smartphones with Android 12 and earlier versions. Google recommends discontinuing the use of such devices due to the termination of their security support.

As reported by Bleeping Computer, the CVE-2025-38352 vulnerability was not initially classified as actively exploited, but the situation has changed in recent months. Security specialists emphasize that the increase in the number of attacks confirms the need for timely updates of Android-based devices.