2025 CVE Vulnerabilities
45,179 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-48597 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay a... |
| CVE-2025-48596 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to lo... |
| CVE-2025-48594 | HIGH | 7.3 | 0.1% | Dec 8, 2025 | In onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion application privileges a... |
| CVE-2025-48592 | HIGH | 7.5 | 0.3% | Dec 8, 2025 | In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could l... |
| CVE-2025-48591 | MEDIUM | 5.5 | 0.1% | Dec 8, 2025 | In multiple locations, there is a possible way to read files from another user due to a missing permission check. This c... |
| CVE-2025-48590 | MEDIUM | 5.5 | 0.1% | Dec 8, 2025 | In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergency... |
| CVE-2025-48589 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand permissions across user due ... |
| CVE-2025-48588 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In startAlwaysOnVpn of Vpn.java, there is a possible way to disable always-on VPN due to a logic error in the code. This... |
| CVE-2025-48586 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to ... |
| CVE-2025-48584 | MEDIUM | 5.5 | 0.1% | Dec 8, 2025 | In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limi... |
| CVE-2025-48583 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In multiple functions of BaseBundle.java, there is a possible way to execute arbitrary code due to a logic error in the ... |
| CVE-2025-48580 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In connectInternal of MediaBrowser.java, there is a possible way to access while in use permission while the app is in b... |
| CVE-2025-48576 | MEDIUM | 5.5 | 0.1% | Dec 8, 2025 | In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible permanen... |
| CVE-2025-48575 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In multiple functions of CertInstaller.java, there is a possible way to install certificates due to a permissions bypass... |
| CVE-2025-48573 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in ... |
| CVE-2025-48572 | HIGH | 7.8 | 0.2% | Dec 8, 2025 | In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. Thi... |
| CVE-2025-48566 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In multiple locations, there is a possible bypass of user profile boundary with a forwarded intent due to improper input... |
| CVE-2025-48565 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In multiple locations, there is a possible way to bypass the cross profile intent filter due to a logic error in the cod... |
| CVE-2025-48564 | HIGH | 7 | 0.1% | Dec 8, 2025 | In multiple locations, there is a possible intent filter bypass due to a race condition. This could lead to local escala... |
| CVE-2025-48555 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In multiple functions of NotificationStation.java, there is a possible cross-profile information disclosure due to a con... |
| CVE-2025-48536 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In grantAllowlistedPackagePermissions of SettingsSliceProvider.java, there is a possible way for a third party app to mo... |
| CVE-2025-48525 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications wh... |
| CVE-2025-32329 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the devic... |
| CVE-2025-32328 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the devic... |
| CVE-2025-32319 | MEDIUM | 6.7 | 0.1% | Dec 8, 2025 | In ensureBound of RemotePrintService.java, there is a possible way for a background app to keep foreground permissions d... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now