EXPOSURES › CVE-2025-48626
CVE-2025-48626
CRITICAL
DETAIL
SourceNVD · cve
Published2025-12-08
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-48626 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
PLAYERS IMPLICATED
DESCRIPTION
In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
AFFECTED FEDRAMP PRODUCTS · 2
| PRODUCT | STATUS |
|---|---|
| Google Services (Google Cloud Platform Products and underlying Infrastructure) Google |
Authorized |
| Google Workspace Google |
Authorized |