Security Advisory

CVE-2025-48621

7.3
HIGH

Vulnerability Description

In DefaultTransitionHandler.java, there is a possible way to enable a tapjacking attack due to a insecure default. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Published Date December 8, 2025
Official Source NIST NVD Advisory