Android phone owners are being urged to check their devices for the latest software update after Google confirmed it has fixed 216 vulnerabilities, 23 of which are rated "Critical."
The alert follows the release of Google's November Security Bulletin, which patches flaws that could leave phones exposed to future attacks. Although no users have been exploited so far, the risk remains if devices are not updated promptly.
Critical Flaws and Remote Code Execution Risk
Google's bulletin states: "This Android Security Bulletin contains details of security vulnerabilities that affect Android devices. The most severe of these issues is a critical security vulnerability in the Framework component that could lead to remote code execution with no additional execution privileges needed."
Remote code execution (RCE) is a serious security flaw that allows hackers to run malicious commands or software on another person's device from a remote location, potentially enabling data theft, malware installation, or full device takeover.
How to Check and Update Your Device
The first devices to receive the update will be Google's own Pixel phones. Other manufacturers, including Samsung, are expected to follow with their own patches shortly.
To check if your Android device is protected, go to Settings > System > Software Update. If an update is available, install it and restart the device to ensure it is safe from potential attacks.
Expert Analysis and Recommendations
Adam Boynton, Senior Enterprise Strategy Manager at Jamf, commented: "Android's November Security Bulletin fixes 216 vulnerabilities across two patch levels. The most severe is CVE-2026-58868, a heap buffer overflow in the Framework's FrameDecoder.cpp, part of the media stack that pulls frames from video and image files to generate thumbnails and previews. It can be exploited with no user interaction."
Boynton added: "Seven of the 23 critical-severity fixes sit in the System component, including CVE-2026-58876, a use-after-free flaw that can lead to remote code execution without additional privileges or user interaction. The bulletin also fixes critical kernel flaws that could allow remote privilege escalation. Google rates severity on what exploitation could do if Android's built-in protections were bypassed."
He concluded: "None of these have been exploited in the wild, but now that the details are public, organisations should update their devices as a priority."
