gcdRadar
live/Patch now/AIR-2026-1765
livelivePatch now2 Disclosed vulnerability

CVE-2026-58868: Google Issues Patches for Critical Android Flaw

Android

Google disclosed a critical remote code execution vulnerability affecting Android versions 14 through 17. The issue requires no user interaction, and users must apply the November security patch level to receive the fix.

why this severityCritical vulnerability rated by the vendor with a patch available.

CVSS
not scored
EPSS
<0.01 · top 67% · 2026-11-13
fix status
Patched
affected
Android 14 through 17
fixed in
security patch level 2026-11-01
first report
4 Nov 2026
last update
4 Nov 2026

What to do

Update to security patch level 2026-11-01 or later.

Timeline · 1

  1. 4 Nov 2026Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction

Sources · 1

News and write-ups

  1. 2026-11-04
    Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction
    The Hacker News · thehackernews.com/2026/11/google-patches-critical-android-flaw.html

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
No AI role
categories
General security
severity
2 · Disclosed vulnerability
fix status
Patched
targets
Not applicable
owasp llm top 10
no entry for these categories
mitre atlas
no technique for these categories
dates
happened 4 Nov 2026 · first reported 4 Nov 2026
origin
News & research feeds
record
confidence 0.90 · created 2026-11-04 15:36Z · updated 2026-11-04 15:36Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# CVE-2026-58868: Google Issues Patches for Critical Android Flaw

https://gcdradar.vercel.app/incidents/cve-2026-58868-google-issues-patches-for-critical-android-fl · AIR-2026-1765 · live

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability): Critical vulnerability rated by the vendor with a patch available.
- Fix status: Patched
- First reported: 2026-11-04
- AI role: No AI role
- Products: Android
- CVE ids: CVE-2026-58868

## Summary

Google disclosed a critical remote code execution vulnerability affecting Android versions 14 through 17. The issue requires no user interaction, and users must apply the November security patch level to receive the fix.

## What to do

Update to security patch level 2026-11-01 or later.

## Affected and fixed versions

- Affected: Android 14 through 17
- Fixed in: security patch level 2026-11-01

## Latest updates

- 2026-11-04: Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction (https://thehackernews.com/2026/11/google-patches-critical-android-flaw.html)

## Sources

- 2026-11-04 The Hacker News: Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction https://thehackernews.com/2026/11/google-patches-critical-android-flaw.html

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. live
  2. live
    iOS APT29 Conducts Watering Hole Campaign Against iOS and Android Users

    Breaches & attacks · Exploited · since 15 Oct 2026 · updated 5 Nov 2026

  3. live
    Android CVE-2026-58882: Android SMS of Death Proof-of-Concept Released

    Research · since 31 Oct 2026 · CVE-2026-58882

  4. live
  5. live8.6
    UnrealIRCd CVE-2026-114713: UnrealIRCd improper neutralization of delimiters vulnerability

    Patch now · Exploited · Partly patched · since 13 Nov 2026 · CVE-2026-114713

  6. live