Google on Monday released Android's November 2026 security updates, fixing more than 200 vulnerabilities, about two dozen of them critical. According to SecurityWeek, the first part arrives on devices as the 2026-11-01 patch level and fixes 119 flaws in Android runtime, Framework and System.
The most severe is a critical flaw in Framework (CVE-2026-58868) that, according to Google, could allow remote code execution with no additional privileges and no user interaction. Seventeen of the fixes were rolled out in advance through Google Play system updates.
The second part arrives as the 2026-11-05 patch level and fixes 97 flaws in the kernel and in Arm, Imagination, MediaTek, Unisoc and Qualcomm components, including more than a dozen critical ones in Bluetooth, the MediaTek modem and other parts. Google also published updates for Android XR and Wear OS. What to do: check in your device settings that the security patch level is 2026-11-05 or later, and install the update when it arrives.