Google released patches in its November 2026 Android security bulletin fixing a critical vulnerability (CVE-2026-58868) affecting Android 14 through 17 that could allow remote code execution without user interaction via a heap buffer overflow. The update also addresses other critical flaws, including a remote denial-of-service issue in Android’s SMS handling, urging users to install the November security patch (2026-11-01 or later) as soon as possible, though no active exploitations have been reported so far.
https://thehackernews.com/2026/11/google-patches-critical-android-flaw.html