Anyone with an Android phone in their pocket must head to their settings as soon as possible and make sure their device is fully up to date.That alert has been raised after Google confirmed that a whopping 216 vulnerabilities have just been fixed.To make matters worse, 23 of these bugs have been given a "Critical" rating - that's the most serious and means phones could be at risk in the future.EU charges Google with abusing Android dominance Right now, it seems no users have been attacked by cyber crooks taking advantage of the flaws, but that doesn't mean anyone should let their guard down.
Article continues below ADVERTISEMENT"This Android Security Bulletin contains details of security vulnerabilities that affect Android devices," Google said in an update."The most severe of these issues is a critical security vulnerability in the Framework component that could lead to remote code execution with no additional execution privileges needed."For those not aware, remote code execution (RCE) is a serious security flaw that allows hackers to run malicious commands or software on someone else's device from another location, potentially stealing data, installing malware or taking control.Article continues below ADVERTISEMENT Urgent warning issued to all UK Amazon users and ignoring it will be costly O2 offers important free upgrade to millions of Android and iPhone users Tech news, reviews and latest gadgets plus selected offers and competitions I would like to receive emails from the Daily Express featuring our latest products, services, offers, and promotions from across the Reach Plc family.Subscribe Invalid email You agree you are 18 or over.
We use your sign-up to provide content in ways you've consented to and to improve our understanding of you.This may include adverts from us and third parties based on our knowledge of you.You can unsubscribe at any time.
More Info.The first phones to get this update will be Google's own Pixel devices.Other manufacturers, including Samsung, are sure to follow quickly with their own patches.Article continues below ADVERTISEMENTTo check whether your Android device is safe, simply head to Settings >System > Software Update.If an update is available, then install it and restart the device.
Once rebooted, the device will then be safe from any future attacks.Speaking about the release, Adam Boynton, Senior Enterprise Strategy Manager at Jamf, said: "Android’s November Security Bulletin fixes 216 vulnerabilities across two patch levels.The most severe is CVE-2026-58868, a heap buffer overflow in the Framework’s FrameDecoder.cpp, part of the media stack that pulls frames from video and image files to generate thumbnails and previews.It can be exploited with no user interaction."Seven of the 23 critical-severity fixes sit in the System component, including CVE-2026-58876, a use-after-free flaw that can lead to remote code execution without additional privileges or user interaction.
The bulletin also fixes critical kernel flaws that could allow remote privilege escalation.Google rates severity on what exploitation could do if Android’s built-in protections were bypassed."None of these have been exploited in the wild, but now that the details are public, organisations should update their devices as a priority."See more of the stories you love from Daily Express and find us easily in Google by making us a Preferred Source.Free and easy-to-do, just click here to activate or add us as Preferred Source in your Google search settings.
Read More
