Google Issues Urgent Update Warning for Android 14 to 16 Users

Google has recently announced the discovery of a zero-day vulnerability deemed to be of high danger. Users of Android 14 through 16 are being urged to perform software updates immediately.

The vulnerability, identified as CVE-2025-48595, carries a score of 8.4 and involves a privilege escalation case that does not require additional execution rights. Furthermore, no user interaction is necessary for the exploit to occur.

Google has acknowledged indications that this vulnerability is undergoing limited and targeted exploitation, according to reports from The Hacker News. However, Google has not disclosed specific details regarding the vulnerability, including the parties potentially behind the activity, the targets, or the scale of the efforts.

Similar weaknesses have also been utilised by commercial vendors targeting high-profile individuals.

Google has released two sets of patches, specifically the 2026-06-01 and 2026-06-05 levels. These include fixes from the first set, alongside patches for the kernel and chipset components from Imagination Technologies, MediaTek, Qualcomm, and Unisoc.

On 2 June 2026, the United States Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-28595 to its Known Exploited Vulnerabilities (KEV) catalogue. The announcement also mandates that Federal Civilian Executive Branch agencies remediate the security flaw by 5 June 2026.

As reported by Forbes, Android users must also promptly apply security updates as soon as they become available for their respective devices. The 2026-06-05 patch will ensure devices are protected from exploitation.

Users can check their security update status directly through the settings menu on their smartphones.