PoC Index

CVE-2025-48543

KEVHIGH 8.8EPSS 0.5%

In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS v3.1
8.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS
0.53% chance of exploitation in the next 30 days, 43th percentile
CISA KEV
added 2025-09-04
Published
2025-09-04
Updated
2026-02-26

Proof-of-concept exploits (1)

References

Related