Those with Android phones in their pocket must watch out for the latest version of this popular operating system. Google has just confirmed the release of a very important update that fixes two serious bugs. What makes this alert more important is that the errors discovered have been given the dreaded zero-day rating.
For those not in that know. That basically means hackers already know about the flaws and are actively explotiing them in a bid to attack devices. It’s why Google has rushed to release the fix and why it’s vital Android fans install it as soon as possible.
Luckily, it’s thought that only a small number of users may have been targeted but, it’s still not worth taking any chances.
“The latest Android bulletin contains fixes for two actively exploited vulnerabilities, making it crucial Android users immediately update their devices,” said Adam Boynton, Senior Security Strategy Manager EMEIA at Jamf.
“CVE-2025-38352 is a flaw that affects the kernel, a core part of the OS that acts as an intermediary between hardware and software. If exploited, an attacker would be able to compromise the device.
“CVE-2025-48543 allows an attacker to gain local privilege escalation without any interaction from the device user, making it harder to defenders to detect. The flaw is located in Android Runtime, which is the virtual machine that runs Android applications; therefore, any vulnerability poses a serious risk.
“Despite being only targeted attacks, with these vulnerabilities being under active exploitation, we strongly recommend that all users update their OS immediately.”
It’s worth remembering that Google’s own-brand Pixel phones should receive the update almost immediately. However, other devices, such as those made by Samsung, might take a little longer to receive the changes.
That’s due to Google releasing things and it taking time for vendors to release their own versions of the Android update.
If you have an Android phone, keep checking settings and always make sure your device is updated.