描述:
Google 发布了 Android 保安公告 (2025 年 12 月) 以应对 Android 操作系统的多个保安漏洞。有关安全性更新的列表,请参考以下网址:
https://source.android.com/docs/security/bulletin/2025-12-01
Android 指权限提升漏洞 (CVE-2025-48572) 及 泄漏资讯漏洞 (CVE-2025-48633) 可能受到有限的针对性攻击。系统管理员应立即为受影响的系统安装修补程式,以减低受到网络攻击的风险。
受影响的系统:
影响:
成功利用漏洞可以导致受影响的装置发生服务被拒绝、权限提升或泄漏资讯,视乎攻击者利用哪个漏洞而定。
建议:
有些生产商已经或计划就其 Android 系统提供应对措施。用户应谘询产品供应商以确认修补程式的供应状况。如修补程式已可获取,用户应立刻安排更新至相应版本或遵从产品供应商的建议以降低风险。
进一步资讯:
- https://source.android.com/docs/security/bulletin/2025-12-01
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40130
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35970
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3012
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6349
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6573
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8045
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11131 (to CVE-2025-11133)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20725 (to CVE-2025-20727)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20730
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20750 (to CVE-2025-20759)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20790 (to CVE-2025-20792)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22420
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22432
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-25177
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27053 (to CVE-2025-27054)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27070
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27074
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31717 (to CVE-2025-31718)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32319
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32328 (to CVE-2025-32329)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38236
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38349
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38500
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46711
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47319
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47323
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47351
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47354
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47370
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47372
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47382
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48525
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48536
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48555
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48564 (to CVE-2025-48566)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48572 (to CVE-2025-48573)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48575 (to CVE-2025-48576)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48580
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48583 (to CVE-2025-48584)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48586
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48588 (to CVE-2025-48592)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48594
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48596 (to CVE-2025-48601)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48603 (to CVE-2025-48604)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48607
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48610
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48612
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48614 (to CVE-2025-48615)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48617 (to CVE-2025-48618)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48620 (to CVE-2025-48624)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48626 (to CVE-2025-48629)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48631 (to CVE-2025-48633)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48637 (to CVE-2025-48639)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61607 (to CVE-2025-61610)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61617 (to CVE-2025-61619)