CVE-2025-48606 - Apache InstallPackageHelper Local Privilege Escalation

CVE-2025-48606 - Apache InstallPackageHelper Local Privilege Escalation

CVE ID : CVE-2025-48606 Published : Dec. 8, 2025, 5:27 p.m. | 38 minutes ago Description : In preparePackage of InstallPackageHelper.java, there is a possible way for an app to appear hidden upon installation without a mechanism to uninstall it due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Published
Dec. 8, 2025
Affected Product: java
Attack Vector: local

Source: Telegram CVE Monitor