{"id":1547,"date":"2026-06-03T07:16:18","date_gmt":"2026-06-03T00:16:18","guid":{"rendered":"https:\/\/vncybers.vn\/canh-bao-lo-hong-zero-day-tren-android-cve-2025-48595-dang-bi-khai-thac-thuc-te\/"},"modified":"2026-06-06T14:20:58","modified_gmt":"2026-06-06T07:20:58","slug":"canh-bao-lo-hong-zero-day-tren-android-cve-2025-48595-dang-bi-khai-thac-thuc-te","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/canh-bao-lo-hong-zero-day-tren-android-cve-2025-48595-dang-bi-khai-thac-thuc-te\/","title":{"rendered":"C\u1ea3nh b\u00e1o: L\u1ed7 h\u1ed5ng Zero-day tr\u00ean Android (CVE-2025-48595) \u0111ang b\u1ecb khai th\u00e1c th\u1ef1c t\u1ebf"},"content":{"rendered":"

Google v\u1eeba ch\u00ednh th\u1ee9c ph\u00e1t h\u00e0nh b\u1ea3n c\u1eadp nh\u1eadt b\u1ea3o m\u1eadt th\u00e1ng 6 n\u0103m 2026 cho h\u1ec7 \u0111i\u1ec1u h\u00e0nh Android, kh\u1eafc ph\u1ee5c t\u1ed5ng c\u1ed9ng 124 l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt. \u0110\u00e1ng ch\u00fa \u00fd nh\u1ea5t trong \u0111\u1ee3t c\u1eadp nh\u1eadt n\u00e0y l\u00e0 m\u1ed9t l\u1ed7i nghi\u00eam tr\u1ecdng \u0111ang b\u1ecb c\u00e1c nh\u00f3m tin t\u1eb7c khai th\u00e1c t\u00edch c\u1ef1c trong c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng c\u00f3 m\u1ee5c ti\u00eau.<\/p>\n

\"B\u1ea3n<\/p>\n

Chi ti\u1ebft v\u1ec1 l\u1ed7 h\u1ed5ng Zero-day CVE-2025-48595<\/h3>\n

L\u1ed7 h\u1ed5ng \u0111\u01b0\u1ee3c theo d\u00f5i d\u01b0\u1edbi m\u00e3 CVE-2025-48595<\/strong> v\u1edbi \u0111i\u1ec3m s\u1ed1 CVSS l\u00e0 8.4 (m\u1ee9c \u0111\u1ed9 nghi\u00eam tr\u1ecdng cao). \u0110\u00e2y l\u00e0 m\u1ed9t l\u1ed7i tr\u00e0n s\u1ed1 nguy\u00ean (integer overflow) n\u1eb1m trong th\u00e0nh ph\u1ea7n Framework c\u1ee7a Android. \u0110i\u1ec3m \u0111\u1eb7c bi\u1ec7t nguy hi\u1ec3m c\u1ee7a l\u1ed7 h\u1ed5ng n\u00e0y l\u00e0 n\u00f3 cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng th\u1ef1c hi\u1ec7n leo thang \u0111\u1eb7c quy\u1ec1n m\u00e0 kh\u00f4ng c\u1ea7n b\u1ea5t k\u1ef3 s\u1ef1 t\u01b0\u01a1ng t\u00e1c n\u00e0o t\u1eeb ph\u00eda ng\u01b0\u1eddi d\u00f9ng<\/strong>.<\/p>\n

Theo b\u00e1o c\u00e1o t\u1eeb Google, c\u00e1c thi\u1ebft b\u1ecb ch\u1ea1y phi\u00ean b\u1ea3n Android 14, 15, 16 v\u00e0 phi\u00ean b\u1ea3n th\u1eed nghi\u1ec7m 16 QPR2 \u0111\u1ec1u n\u1eb1m trong danh s\u00e1ch b\u1ecb \u1ea3nh h\u01b0\u1edfng. K\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 t\u1eadn d\u1ee5ng l\u1ed7 h\u1ed5ng n\u00e0y \u0111\u1ec3 chi\u1ebfm quy\u1ec1n ki\u1ec3m so\u00e1t cao nh\u1ea5t tr\u00ean thi\u1ebft b\u1ecb, t\u1eeb \u0111\u00f3 th\u1ef1c hi\u1ec7n c\u00e1c h\u00e0nh vi \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u ho\u1eb7c c\u00e0i \u0111\u1eb7t m\u00e3 \u0111\u1ed9c theo d\u00f5i m\u00e0 ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng h\u1ec1 hay bi\u1ebft.<\/p>\n

C\u00e1c l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt kh\u00e1c trong b\u1ea3n c\u1eadp nh\u1eadt th\u00e1ng 6<\/h3>\n

Ngo\u00e0i l\u1ed7 h\u1ed5ng Zero-day n\u00eau tr\u00ean, b\u1ea3n c\u1eadp nh\u1eadt l\u1ea7n n\u00e0y c\u00f2n gi\u1ea3i quy\u1ebft m\u1ed9t lo\u1ea1t c\u00e1c v\u1ea5n \u0111\u1ec1 b\u1ea3o m\u1eadt kh\u00e1c:<\/p>\n

    \n
  • Th\u00e0nh ph\u1ea7n System:<\/strong> V\u00e1 c\u00e1c l\u1ed7 h\u1ed5ng c\u00f3 th\u1ec3 d\u1eabn \u0111\u1ebfn th\u1ef1c thi m\u00e3 t\u1eeb xa ho\u1eb7c leo thang \u0111\u1eb7c quy\u1ec1n c\u1ee5c b\u1ed9.<\/li>\n
  • Th\u00e0nh ph\u1ea7n h\u1ea1t nh\u00e2n (Kernel):<\/strong> C\u1eadp nh\u1eadt c\u00e1c b\u1ea3n v\u00e1 b\u1ea3o m\u1eadt quan tr\u1ecdng cho nh\u00e2n Linux n\u1ec1n t\u1ea3ng.<\/li>\n
  • Th\u00e0nh ph\u1ea7n t\u1eeb b\u00ean th\u1ee9 ba:<\/strong> Gi\u1ea3i quy\u1ebft c\u00e1c l\u1ed7 h\u1ed5ng trong chipset c\u1ee7a c\u00e1c nh\u00e0 cung c\u1ea5p l\u1edbn nh\u01b0 Imagination Technologies, MediaTek, Qualcomm v\u00e0 Unisoc.<\/li>\n<\/ul>\n

    Google \u0111\u00e3 chia b\u1ea3n c\u1eadp nh\u1eadt th\u00e0nh hai m\u1ee9c \u0111\u1ed9: c\u1ea5p \u0111\u1ed9 2026-06-01 (v\u00e1 c\u00e1c l\u1ed7i Framework v\u00e0 System) v\u00e0 c\u1ea5p \u0111\u1ed9 2026-06-05 (bao g\u1ed3m t\u1ea5t c\u1ea3 c\u00e1c b\u1ea3n v\u00e1 tr\u01b0\u1edbc \u0111\u00f3 c\u1ed9ng v\u1edbi c\u00e1c b\u1ea3n v\u00e1 cho Kernel v\u00e0 chipset b\u00ean th\u1ee9 ba).<\/p>\n

    Khuy\u1ebfn ngh\u1ecb cho ng\u01b0\u1eddi d\u00f9ng<\/h3>\n

    M\u1eb7c d\u00f9 Google cho bi\u1ebft vi\u1ec7c khai th\u00e1c CVE-2025-48595 hi\u1ec7n ch\u1ec9 di\u1ec5n ra \u1edf m\u1ee9c \u0111\u1ed9 “c\u00f3 m\u1ee5c ti\u00eau v\u00e0 h\u1ea1n ch\u1ebf”, nh\u01b0ng nguy c\u01a1 \u0111\u1ed1i v\u1edbi ng\u01b0\u1eddi d\u00f9ng ph\u1ed5 th\u00f4ng v\u1eabn lu\u00f4n hi\u1ec7n h\u1eefu khi m\u00e3 khai th\u00e1c c\u00f3 th\u1ec3 b\u1ecb ph\u1ed5 bi\u1ebfn r\u1ed9ng r\u00e3i h\u01a1n.<\/p>\n

    Ng\u01b0\u1eddi d\u00f9ng Android \u0111\u01b0\u1ee3c khuy\u1ebfn ngh\u1ecb th\u1ef1c hi\u1ec7n ngay c\u00e1c b\u01b0\u1edbc sau:<\/p>\n

      \n
    1. Truy c\u1eadp v\u00e0o C\u00e0i \u0111\u1eb7t (Settings)<\/strong> > H\u1ec7 th\u1ed1ng (System)<\/strong> > C\u1eadp nh\u1eadt h\u1ec7 th\u1ed1ng (System Update)<\/strong> \u0111\u1ec3 ki\u1ec3m tra v\u00e0 c\u00e0i \u0111\u1eb7t b\u1ea3n v\u00e1 m\u1edbi nh\u1ea5t.<\/li>\n
    2. \u0110\u1ed1i v\u1edbi c\u00e1c d\u00f2ng m\u00e1y Pixel, ng\u01b0\u1eddi d\u00f9ng c\u00f3 th\u1ec3 ki\u1ec3m tra th\u00eam t\u1ea1i m\u1ee5c B\u1ea3o m\u1eadt & Quy\u1ec1n ri\u00eang t\u01b0<\/strong> trong ph\u1ea7n d\u1ecbch v\u1ee5 c\u1ee7a Google.<\/li>\n
    3. Lu\u00f4n \u01b0u ti\u00ean t\u1ea3i \u1ee9ng d\u1ee5ng t\u1eeb c\u00e1c ngu\u1ed3n uy t\u00edn nh\u01b0 Google Play Store v\u00e0 b\u1eadt t\u00ednh n\u0103ng Play Protect.<\/li>\n<\/ol>\n

      Vi\u1ec7c c\u1eadp nh\u1eadt h\u1ec7 \u0111i\u1ec1u h\u00e0nh kh\u00f4ng ch\u1ec9 mang l\u1ea1i c\u00e1c t\u00ednh n\u0103ng m\u1edbi m\u00e0 quan tr\u1ecdng h\u01a1n l\u00e0 t\u1ea5m l\u00e1 ch\u1eafn b\u1ea3o v\u1ec7 d\u1eef li\u1ec7u c\u00e1 nh\u00e2n tr\u01b0\u1edbc nh\u1eefng m\u1ed1i \u0111e d\u1ecda kh\u00f4ng ng\u1eebng bi\u1ebfn \u0111\u1ed5i tr\u00ean kh\u00f4ng gian m\u1ea1ng.<\/p>\n

      VNCyberS t\u1ed5ng h\u1ee3p t\u1eeb The Hacker News v\u00e0 Google Security Bulletin<\/em><\/p>","protected":false},"excerpt":{"rendered":"

      Google v\u1eeba ch\u00ednh th\u1ee9c ph\u00e1t h\u00e0nh b\u1ea3n c\u1eadp nh\u1eadt b\u1ea3o m\u1eadt th\u00e1ng 6 n\u0103m 2026 cho h\u1ec7 \u0111i\u1ec1u h\u00e0nh Android, kh\u1eafc ph\u1ee5c t\u1ed5ng c\u1ed9ng 124 l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt. \u0110\u00e1ng ch\u00fa \u00fd nh\u1ea5t trong \u0111\u1ee3t c\u1eadp nh\u1eadt n\u00e0y l\u00e0 m\u1ed9t l\u1ed7i nghi\u00eam tr\u1ecdng \u0111ang b\u1ecb c\u00e1c nh\u00f3m tin t\u1eb7c khai th\u00e1c t\u00edch c\u1ef1c trong c\u00e1c […]<\/p>\n","protected":false},"author":2,"featured_media":1548,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[],"class_list":["post-1547","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-kien-thuc"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1547","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1547"}],"version-history":[{"count":2,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1547\/revisions"}],"predecessor-version":[{"id":1571,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1547\/revisions\/1571"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1548"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1547"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1547"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1547"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}