CVE-2025-48545 in Androidالمعلومات

الملخص

بحسب MITRE • 04/09/2025

In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a confused deputy. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

مسؤول

Google Android

حجز

22/05/2025

إفشاء

04/09/2025

الاعتدال

تمت الموافقة

إدخال

VDB-322701

EPSS

0.00003

KEV

لا

النشاطات

منخفض جدًا

المصادر

Interested in the pricing of exploits?

See the underground prices here!