{"id":1560,"date":"2026-06-04T07:16:11","date_gmt":"2026-06-04T00:16:11","guid":{"rendered":"https:\/\/vncybers.vn\/google-phat-hanh-ban-va-bao-mat-android-thang-6-2026-khac-phuc-124-lo-hong-bao-gom-1-loi-zero-day\/"},"modified":"2026-06-04T12:03:12","modified_gmt":"2026-06-04T05:03:12","slug":"google-phat-hanh-ban-va-bao-mat-android-thang-6-2026-khac-phuc-124-lo-hong-bao-gom-1-loi-zero-day","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/google-phat-hanh-ban-va-bao-mat-android-thang-6-2026-khac-phuc-124-lo-hong-bao-gom-1-loi-zero-day\/","title":{"rendered":"Google ph\u00e1t h\u00e0nh b\u1ea3n v\u00e1 b\u1ea3o m\u1eadt Android th\u00e1ng 6\/2026: Kh\u1eafc ph\u1ee5c 124 l\u1ed7 h\u1ed5ng, bao g\u1ed3m 1 l\u1ed7i Zero-day"},"content":{"rendered":"

V\u1eeba qua, Google \u0111\u00e3 ch\u00ednh th\u1ee9c tung ra b\u1ea3n c\u1eadp nh\u1eadt b\u1ea3o m\u1eadt \u0111\u1ecbnh k\u1ef3 th\u00e1ng 6\/2026 cho h\u1ec7 \u0111i\u1ec1u h\u00e0nh Android. B\u1ea3n v\u00e1 n\u00e0y gi\u1ea3i quy\u1ebft t\u1ed5ng c\u1ed9ng 124 l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt, trong \u0111\u00f3 \u0111\u00e1ng ch\u00fa \u00fd nh\u1ea5t l\u00e0 m\u1ed9t l\u1ed7i Zero-day nghi\u00eam tr\u1ecdng \u0111ang b\u1ecb khai th\u00e1c trong c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng c\u00f3 m\u1ee5c ti\u00eau.<\/p>\n

\"Google<\/p>\n

L\u1ed7 h\u1ed5ng Zero-day n\u00e0y \u0111\u01b0\u1ee3c \u0111\u1ecbnh danh l\u00e0 CVE-2025-48595<\/strong> v\u1edbi \u0111i\u1ec3m s\u1ed1 CVSS l\u00e0 8.4 (m\u1ee9c \u0111\u1ed9 nghi\u00eam tr\u1ecdng cao). \u0110\u00e2y l\u00e0 m\u1ed9t l\u1ed7i li\u00ean quan \u0111\u1ebfn th\u00e0nh ph\u1ea7n Framework c\u1ee7a Android, cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng leo thang \u0111\u1eb7c quy\u1ec1n m\u00e0 kh\u00f4ng c\u1ea7n b\u1ea5t k\u1ef3 s\u1ef1 t\u01b0\u01a1ng t\u00e1c n\u00e0o t\u1eeb ph\u00eda ng\u01b0\u1eddi d\u00f9ng.<\/p>\n

Chi ti\u1ebft v\u1ec1 l\u1ed7 h\u1ed5ng CVE-2025-48595<\/h3>\n

Theo b\u00e1o c\u00e1o t\u1eeb c\u00e1c chuy\u00ean gia b\u1ea3o m\u1eadt, CVE-2025-48595 xu\u1ea5t ph\u00e1t t\u1eeb l\u1ed7i tr\u00e0n s\u1ed1 nguy\u00ean (integer overflow) t\u1ea1i nhi\u1ec1u v\u1ecb tr\u00ed trong h\u1ec7 th\u1ed1ng. K\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 l\u1ee3i d\u1ee5ng s\u01a1 h\u1edf n\u00e0y \u0111\u1ec3 th\u1ef1c thi m\u00e3 t\u1eeb xa v\u00e0 chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n thi\u1ebft b\u1ecb \u1edf m\u1ee9c cao h\u01a1n quy\u1ec1n h\u1ea1n th\u00f4ng th\u01b0\u1eddng. L\u1ed7 h\u1ed5ng n\u00e0y \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn c\u00e1c thi\u1ebft b\u1ecb ch\u1ea1y Android phi\u00ean b\u1ea3n 14, 15, 16 v\u00e0 phi\u00ean b\u1ea3n th\u1eed nghi\u1ec7m 16 QPR2.<\/p>\n

Google th\u1eeba nh\u1eadn r\u1eb1ng \u0111\u00e3 c\u00f3 nh\u1eefng d\u1ea5u hi\u1ec7u cho th\u1ea5y CVE-2025-48595 \u0111ang b\u1ecb khai th\u00e1c th\u1ef1c t\u1ebf m\u1ed9t c\u00e1ch h\u1ea1n ch\u1ebf. M\u1eb7c d\u00f9 g\u00e3 kh\u1ed5ng l\u1ed3 t\u00ecm ki\u1ebfm kh\u00f4ng ti\u1ebft l\u1ed9 chi ti\u1ebft v\u1ec1 c\u00e1c nh\u00f3m t\u1ea5n c\u00f4ng hay quy m\u00f4 \u1ea3nh h\u01b0\u1edfng, nh\u01b0ng c\u00e1c chuy\u00ean gia nh\u1eadn \u0111\u1ecbnh \u0111\u00e2y c\u00f3 th\u1ec3 l\u00e0 c\u00f4ng c\u1ee5 \u0111\u01b0\u1ee3c c\u00e1c nh\u00e0 cung c\u1ea5p ph\u1ea7n m\u1ec1m gi\u00e1n \u0111i\u1ec7p th\u01b0\u01a1ng m\u1ea1i s\u1eed d\u1ee5ng \u0111\u1ec3 nh\u1eafm v\u00e0o c\u00e1c c\u00e1 nh\u00e2n quan tr\u1ecdng.<\/p>\n

Ph\u1ea3n \u1ee9ng t\u1eeb CISA<\/h3>\n

Ngay sau khi Google c\u00f4ng b\u1ed1 th\u00f4ng tin, C\u01a1 quan An ninh C\u01a1 s\u1edf h\u1ea1 t\u1ea7ng v\u00e0 An ninh m\u1ea1ng Hoa K\u1ef3 (CISA) \u0111\u00e3 b\u1ed5 sung CVE-2025-48595 v\u00e0o danh m\u1ee5c C\u00e1c l\u1ed7 h\u1ed5ng b\u1ecb khai th\u00e1c \u0111\u00e3 bi\u1ebft (KEV) v\u00e0o ng\u00e0y 2\/6\/2026. CISA y\u00eau c\u1ea7u c\u00e1c c\u01a1 quan ch\u00ednh ph\u1ee7 li\u00ean bang ph\u1ea3i ho\u00e0n t\u1ea5t vi\u1ec7c c\u1eadp nh\u1eadt b\u1ea3n v\u00e1 cho c\u00e1c thi\u1ebft b\u1ecb b\u1ecb \u1ea3nh h\u01b0\u1edfng tr\u01b0\u1edbc ng\u00e0y 5\/6\/2026 \u0111\u1ec3 ng\u0103n ch\u1eb7n r\u1ee7i ro.<\/p>\n

C\u00e1c l\u1ed7 h\u1ed5ng kh\u00e1c \u0111\u01b0\u1ee3c kh\u1eafc ph\u1ee5c<\/h3>\n

B\u00ean c\u1ea1nh l\u1ed7i Zero-day n\u00eau tr\u00ean, b\u1ea3n c\u1eadp nh\u1eadt th\u00e1ng 6\/2026 c\u0169ng x\u1eed l\u00fd h\u00e0ng lo\u1ea1t v\u1ea5n \u0111\u1ec1 b\u1ea3o m\u1eadt trong c\u00e1c th\u00e0nh ph\u1ea7n h\u1ec7 th\u1ed1ng v\u00e0 nh\u00e2n (kernel). Google \u0111\u00e3 ph\u00e1t h\u00e0nh hai c\u1ea5p \u0111\u1ed9 v\u00e1 l\u1ed7i:<\/p>\n

    \n
  • 2026-06-01:<\/strong> T\u1eadp trung v\u00e0o c\u00e1c l\u1ed7i Framework v\u00e0 System.<\/li>\n
  • 2026-06-05:<\/strong> Bao g\u1ed3m t\u1ea5t c\u1ea3 c\u00e1c b\u1ea3n v\u00e1 c\u1ee7a c\u1ea5p \u0111\u1ed9 tr\u01b0\u1edbc \u0111\u00f3, c\u1ed9ng th\u00eam c\u00e1c b\u1ea3n v\u00e1 cho nh\u00e2n (kernel) v\u00e0 c\u00e1c th\u00e0nh ph\u1ea7n ph\u1ea7n c\u1ee9ng t\u1eeb c\u00e1c nh\u00e0 cung c\u1ea5p b\u00ean th\u1ee9 ba nh\u01b0 Imagination Technologies, MediaTek, Qualcomm v\u00e0 Unisoc.<\/li>\n<\/ul>\n

    L\u1eddi khuy\u00ean cho ng\u01b0\u1eddi d\u00f9ng<\/h3>\n

    Ng\u01b0\u1eddi d\u00f9ng Android \u0111\u01b0\u1ee3c khuy\u1ebfn c\u00e1o n\u00ean ki\u1ec3m tra v\u00e0 c\u1eadp nh\u1eadt thi\u1ebft b\u1ecb c\u1ee7a m\u00ecnh ngay l\u1eadp t\u1ee9c. \u0110\u1ec3 th\u1ef1c hi\u1ec7n, h\u00e3y v\u00e0o C\u00e0i \u0111\u1eb7t > B\u1ea3o m\u1eadt & Quy\u00ean ri\u00eang t\u01b0 > C\u1eadp nh\u1eadt h\u1ec7 th\u1ed1ng<\/strong>. Vi\u1ec7c duy tr\u00ec thi\u1ebft b\u1ecb \u1edf phi\u00ean b\u1ea3n b\u1ea3o m\u1eadt m\u1edbi nh\u1ea5t l\u00e0 c\u00e1ch hi\u1ec7u qu\u1ea3 nh\u1ea5t \u0111\u1ec3 b\u1ea3o v\u1ec7 d\u1eef li\u1ec7u c\u00e1 nh\u00e2n tr\u01b0\u1edbc c\u00e1c m\u1ed1i \u0111e d\u1ecda kh\u00f4ng gian m\u1ea1ng ng\u00e0y c\u00e0ng ph\u1ee9c t\u1ea1p.<\/p>\n

    VNCyberS t\u1ed5ng h\u1ee3p t\u1eeb The Hacker News v\u00e0 CISA<\/em><\/p>","protected":false},"excerpt":{"rendered":"

    V\u1eeba qua, Google \u0111\u00e3 ch\u00ednh th\u1ee9c tung ra b\u1ea3n c\u1eadp nh\u1eadt b\u1ea3o m\u1eadt \u0111\u1ecbnh k\u1ef3 th\u00e1ng 6\/2026 cho h\u1ec7 \u0111i\u1ec1u h\u00e0nh Android. B\u1ea3n v\u00e1 n\u00e0y gi\u1ea3i quy\u1ebft t\u1ed5ng c\u1ed9ng 124 l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt, trong \u0111\u00f3 \u0111\u00e1ng ch\u00fa \u00fd nh\u1ea5t l\u00e0 m\u1ed9t l\u1ed7i Zero-day nghi\u00eam tr\u1ecdng \u0111ang b\u1ecb khai th\u00e1c trong c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng […]<\/p>\n","protected":false},"author":2,"featured_media":1559,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[70],"tags":[],"class_list":["post-1560","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ho-so"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1560","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1560"}],"version-history":[{"count":2,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1560\/revisions"}],"predecessor-version":[{"id":1562,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1560\/revisions\/1562"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1559"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1560"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1560"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1560"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}