Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction

Google issued patches for a critical Android flaw, CVE-2026-58868, that could allow remote code execution without user interaction. The vulnerability affects Android 14 through 17. Fixes arrive with security patch level 2026-11-01 or later, distributed by phone makers and carriers on their own schedules. As of November 4, Google had not reported active exploits.