GOOGLE PATCHES 107 ANDROID FLAWS, INCLUDING TWO BEING ACTIVELY EXPLOITED

Summary from the TLDR InfoSec newsletter

Google's December 2025 Android Security Bulletin addressed 107 vulnerabilities, including two actively exploited high-severity framework flaws (CVE-2025-48633 and CVE-2025-48572) that enable local code execution via improper input validation on Android 13-16.