Google patches over 200 Android vulnerabilities in November 2026 update
- Severity
- High
- Sources
- 1
What happened
Google's November 2026 Android Security Bulletin fixes over 200 issues. Critical zero-click RCE flaws include CVE-2026-58868 (Framework), CVE-2026-58876 and CVE-2026-58936 (System), with fixes listed for Android 14, 15, 16, 16 QPR2 and 17. Critical kernel issues affect Bluetooth, HID and protected KVM, MediaTek lists eight critical modem flaws, and one critical Qualcomm closed-source issue is included. CVE-2026-58988 is a high-severity local information disclosure in the Android runtime. Patch level 2026-11-05 includes all applicable fixes, and the bulletin does not state exploitation. Defenders should confirm devices reach 2026-11-05 and check Google Play system updates separately.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Install the November 2026 Android security update from your device manufacturer when it is available for your phone.
- Check that your device shows security patch level 2026-11-05 or later.
- Check Google Play system updates separately, as they are not covered by the main update.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Who and what is in it
Products