描述:
Google 發布了 Android 保安公告 (2026 年 6 月) 以應對 Android 操作系統的多個保安漏洞。有關安全性更新的列表,請參考以下網址:
https://source.android.com/docs/security/bulletin/2026/2026-06-01
Android 指一個權限提升漏洞 (CVE-2025-48595) 可能受到有限的針對性攻擊。另外,服務被拒絕漏洞 (CVE-2025-64720) 及權限提升漏洞 (CVE-2025-65018) 的概念驗證 (PoC) 程式碼已被公開。系統管理員應立即為受影響的系統安裝修補程式,以減低受到網絡攻擊的風險。
受影響的系統:
- Android 14、15、16 及 16-qpr2 版本
影響:
成功利用漏洞可以導致受影響的系統發生遠端執行程式碼、服務被拒絕、權限提升或泄漏資訊。
建議:
有些生產商已經或計劃就其 Android 系統提供應對措施。用戶應諮詢產品供應商以確認修補程式的供應狀況。如修補程式已可獲取,用戶應立刻安排更新至相應版本或遵從產品供應商的建議以降低風險。
進一步資訊:
- https://source.android.com/docs/security/bulletin/2026/2026-06-01
- https://www.hkcert.org/tc/security-bulletin/android-multiple-vulnerabilities_20260602
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22424
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22426
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26418
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32348
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40214
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47384
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47392
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47400 (to CVE-2025-47401)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47403
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48570
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48581
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48595
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48600
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48612
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48615 (to CVE-2025-48616)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48648 (to CVE-2025-48649)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48652
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59604 (to CVE-2025-59606)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64505
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64720
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65018
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-71251 (to CVE-2025-71256)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0009
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0016
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0018
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0036
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0039 (to CVE-2026-0046)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0048
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0050 (to CVE-2026-0052)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0055 (to CVE-2026-0056)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0059 (to CVE-2026-0061)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0067
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0069 (to CVE-2026-0070)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0074 (to CVE-2026-0080)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0085 (to CVE-2026-0089)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0091
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0093 (to CVE-2026-0100)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20431 (to CVE-2026-20433)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20435
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20447 (to CVE-2026-20450)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20453 (to CVE-2026-20455)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21352 (to CVE-2026-21353)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21367
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21372 (to CVE-2026-21376)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21378
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21380 (to CVE-2026-21381)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21538 (to CVE-2026-21547)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21736
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22163
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22167
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24085
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24089
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25276 (to CVE-2026-25277)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28574
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28577 (to CVE-2026-28578)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28580 (to CVE-2026-28581)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28586