Updated Android Security Bulletin prepares for a significant December 2025 security fix

Google has officially issued the Android Security Bulletin for December 2025, which includes a list of all vulnerabilities affecting Android devices. Unlike the frequent Pixel (or manufacturer-specific) security patches, this warning identifies all potential vulnerabilities affecting Android devices.

These vulnerabilities, which impact Android 13 or later, will be addressed in the Android security update scheduled for December 5, 2025, and will be provided to your devices when the manufacturer releases it.

Google’s December Security Bulletin resolves many vulnerabilities categorised as “critical” or “high” severity. The most serious vulnerability is in the Android Framework, which may be used to remotely launch a denial-of-service attack against users without requiring additional privileges.

Meanwhile, the most serious vulnerabilities at the system and kernel levels can be used to elevate permission levels even with the user’s express authorisation. In addition, the Bulletin includes vulnerabilities specific to Qualcomm, MediaTek, and Unisoc chipsets.

To guarantee that your devices are safe against these vulnerabilities, make sure to update them with the most recent security patches.

The new security report for December contains a long list of exploits, as opposed to the October and November bulletins, which contained only a few. This is most likely a continuation of its recent policy change to a quarterly reporting cycle.

Google has also updated the Security Bulletins for Android Automotive and Wear OS, but no vulnerabilities have been reported in either.