CISA Alerts on Exploited Android Framework Vulnerabilities

CISA has added two critical vulnerabilities affecting the Android Framework to its Known Exploited Vulnerabilities catalog. These vulnerabilities are actively exploited in the wild and pose significant risks to millions of mobile devices globally. The vulnerabilities were added to the catalog on December 2, 2025.