CVE-2026-58868: Google Issues Patches for Critical Android Flaw
Android
Google disclosed a critical remote code execution vulnerability affecting Android versions 14 through 17. The issue requires no user interaction, and users must apply the November security patch level to receive the fix.
why this severityCritical vulnerability rated by the vendor with a patch available.
- CVSS
- not scored
- EPSS
- <0.01 · top 67% · 2026-11-13
- fix status
- Patched
- affected
- Android 14 through 17
- fixed in
- security patch level 2026-11-01
- first report
- 4 Nov 2026
- last update
- 4 Nov 2026
- CVE ids
What to do
Update to security patch level 2026-11-01 or later.
Timeline · 1
Sources · 1
News and write-ups
- 2026-11-04Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User InteractionThe Hacker News · thehackernews.com/2026/11/google-patches-critical-android-flaw.html
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Patch now
- AI role
- No AI role
- categories
- General security
- severity
- 2 · Disclosed vulnerability
- fix status
- Patched
- targets
- Not applicable
- owasp llm top 10
- no entry for these categories
- mitre atlas
- no technique for these categories
- dates
- happened 4 Nov 2026 · first reported 4 Nov 2026
- origin
- News & research feeds
- record
- confidence 0.90 · created 2026-11-04 15:36Z · updated 2026-11-04 15:36Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# CVE-2026-58868: Google Issues Patches for Critical Android Flaw https://gcdradar.vercel.app/incidents/cve-2026-58868-google-issues-patches-for-critical-android-fl · AIR-2026-1765 · live - Lane: Patch now - Severity: 2 (Disclosed vulnerability): Critical vulnerability rated by the vendor with a patch available. - Fix status: Patched - First reported: 2026-11-04 - AI role: No AI role - Products: Android - CVE ids: CVE-2026-58868 ## Summary Google disclosed a critical remote code execution vulnerability affecting Android versions 14 through 17. The issue requires no user interaction, and users must apply the November security patch level to receive the fix. ## What to do Update to security patch level 2026-11-01 or later. ## Affected and fixed versions - Affected: Android 14 through 17 - Fixed in: security patch level 2026-11-01 ## Latest updates - 2026-11-04: Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction (https://thehackernews.com/2026/11/google-patches-critical-android-flaw.html) ## Sources - 2026-11-04 The Hacker News: Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction https://thehackernews.com/2026/11/google-patches-critical-android-flaw.html Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- liveAndroid GhostMap Android flaw lets malicious app trigger boot loop
Research · since 5 Nov 2026
- liveiOS APT29 Conducts Watering Hole Campaign Against iOS and Android Users
Breaches & attacks · Exploited · since 15 Oct 2026 · updated 5 Nov 2026
- liveAndroid CVE-2026-58882: Android SMS of Death Proof-of-Concept Released
Research · since 31 Oct 2026 · CVE-2026-58882
- liveDixell refrigeration units Multiple vulnerabilities discovered in Dixell refrigeration units
Patch now · Exploited · since 13 Nov 2026
- live8.6UnrealIRCd CVE-2026-114713: UnrealIRCd improper neutralization of delimiters vulnerability
Patch now · Exploited · Partly patched · since 13 Nov 2026 · CVE-2026-114713
- liveCity of Osaka municipal systems City of Osaka suffers data breach impacting one million residents
Breaches & attacks · Real loss · since 13 Nov 2026