Android October 2026 Security Updates Patch 25 Vulnerabilities, Including 7 Critical Flaws

October 2026 Android Security Patch Release

Google rolled out new Android security updates for October 2026, identified as the 2026-10-01 security patch level. This release addresses a total of 25 vulnerabilities found in the Android Framework and System components. This update marks a change from previous years' updates, which were typically split into two parts.

Critical Vulnerabilities Addressed

Among the 25 resolved issues, seven are critical-severity bugs: one in Framework and six in System. The most severe critical vulnerability is located in the System component, which could lead to local escalation of privilege without requiring additional execution privileges or user interaction for exploitation. This type of vulnerability poses a significant risk to device security.

Breakdown of Resolved Issues

The Framework component had seven flaws patched, including two denial-of-service (DoS) and five elevation of privilege (EoP) vulnerabilities. The System component received fixes for 18 vulnerabilities, comprising eight EoP, five DoS, one remote code execution (RCE), and four information disclosure issues. Additionally, three security defects were addressed via Google Play system updates, affecting Telephonycore and WiFi.

Updates for Pixel Devices and Android Automotive OS

Pixel devices received specific fixes for six vulnerabilities, including three critical-severity issues impacting Bluetooth, GDMC, and GSA components, which could lead to EoP and information disclosure. The Android Automotive OS update includes all fixes from the Android October 2026 updates, plus five additional high-severity EoP bugs. Google has not indicated that any of these vulnerabilities are currently being exploited in the wild.