描述:
Google 發布了 Android 保安公告 (2025 年 12 月) 以應對 Android 操作系統的多個保安漏洞。有關安全性更新的列表,請參考以下網址:
https://source.android.com/docs/security/bulletin/2025-12-01
Android 指權限提升漏洞 (CVE-2025-48572) 及 泄漏資訊漏洞 (CVE-2025-48633) 可能受到有限的針對性攻擊。系統管理員應立即為受影響的系統安裝修補程式,以減低受到網絡攻擊的風險。
受影響的系統:
影響:
成功利用漏洞可以導致受影響的裝置發生服務被拒絕、權限提升或泄漏資訊,視乎攻擊者利用哪個漏洞而定。
建議:
有些生產商已經或計劃就其 Android 系統提供應對措施。用戶應諮詢產品供應商以確認修補程式的供應狀況。如修補程式已可獲取,用戶應立刻安排更新至相應版本或遵從產品供應商的建議以降低風險。
進一步資訊:
- https://source.android.com/docs/security/bulletin/2025-12-01
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40130
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35970
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3012
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6349
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6573
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8045
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11131 (to CVE-2025-11133)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20725 (to CVE-2025-20727)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20730
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20750 (to CVE-2025-20759)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20790 (to CVE-2025-20792)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22420
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22432
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-25177
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27053 (to CVE-2025-27054)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27070
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27074
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31717 (to CVE-2025-31718)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32319
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32328 (to CVE-2025-32329)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38236
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38349
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38500
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46711
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47319
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47323
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47351
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47354
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47370
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47372
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47382
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48525
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48536
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48555
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48564 (to CVE-2025-48566)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48572 (to CVE-2025-48573)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48575 (to CVE-2025-48576)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48580
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48583 (to CVE-2025-48584)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48586
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48588 (to CVE-2025-48592)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48594
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48596 (to CVE-2025-48601)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48603 (to CVE-2025-48604)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48607
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48610
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48612
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48614 (to CVE-2025-48615)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48617 (to CVE-2025-48618)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48620 (to CVE-2025-48624)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48626 (to CVE-2025-48629)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48631 (to CVE-2025-48633)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48637 (to CVE-2025-48639)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61607 (to CVE-2025-61610)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61617 (to CVE-2025-61619)