Google this week announced the rollout of fresh Android security updates that resolve 25 vulnerabilities in the Framework and System components.
The fresh release arrives on devices as the 2026-10-01 security patch level and marks a change from the updates released over the past several years, which have been split into two parts.
Android’s October 2026 patches resolve seven flaws in Framework and 18 in System, including a total of seven critical-severity bugs (one in Framework and six in System).
“The most severe of these issues is a critical security vulnerability in the System component that could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation,” Google notes in its advisory.
Of the issues resolved in Framework, two can lead to denial-of-service (DoS) and five to elevation of privilege (EoP). In System, Google resolved eight EoP vulnerabilities, five DoS bugs, one remote code execution (RCE) flaw, and four information disclosure issues.
The advisory also mentions three security defects addressed via Google Play system updates, including one in Telephonycore and two in WiFi.
In addition to the Android patches, Pixel devices received fixes for six vulnerabilities that could lead to EoP and information disclosure, including three critical-severity issues affecting the Bluetooth, GDMC, and GSA components.
The Android Automotive OS update contains fixes for all the bugs resolved with the Android October 2026 updates and for five other high-severity bugs leading to EoP.
Google makes no mention of any of these vulnerabilities being exploited in the wild. However, users are advised to update their devices as soon as possible.
Related: Android’s September 2026 Updates Patch 180 Vulnerabilities
Related: Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports
Related: FBI Blames Contractor’s Missed Patch for ShinyHunters Breach
Related: Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks
