Google patches over 200 flaws in Android November updates

Google has announced November 2026 security updates for Android addressing more than 200 vulnerabilities, including about two dozen rated critical. The first update, marked by security patch level 2026-11-01, fixes 119 defects in Android Runtime, Framework and System. Framework accounts for 65 fixes and System for 53; the remaining fix addresses a high-severity information-disclosure flaw in Android Runtime.

Google identifies CVE-2026-58868 in Framework as the most severe issue. The company says it is a critical vulnerability that could allow remote code execution without additional privileges or user interaction. The System fixes also include critical remote-code-execution, privilege-escalation and denial-of-service vulnerabilities. Google says 17 flaws were patched earlier through Google Play system updates.

The second update, patch level 2026-11-05, resolves 97 issues in the Kernel and components from Arm, Imagination Technologies, MediaTek, Unisoc and Qualcomm. More than a dozen are critical, affecting areas including Bluetooth, pKVM, HID, a MediaTek modem and a Qualcomm closed-source component. Google says patch levels 2026-11-05 or later address all these issues. Separate November updates for Android XR and Wear OS fix additional high-severity vulnerabilities in Framework, and, for Wear OS, System.