Android’s November security fixes address a critical no-interaction flaw

Google published the November 2026 Android Security Bulletin on November 2, detailing a critical flaw that requires no user interaction to exploit. For your phone, the useful date to check is its Android security patch level—not just its Android version. The 2026-11-05 label covers the full bulletin, but does not mean the fixes have reached every device.

What the critical Framework flaw can do

CVE-2026-58868, in Android’s Framework component, is rated Critical and could let an attacker run code remotely. It requires neither additional execution privileges nor user interaction.

The bulletin lists updated Android Open Source Project (AOSP) versions 14, 15, 16, 16-qpr2 and 17. Those entries do not establish which individual phone models are affected; applicability depends on the device and its components.

Google’s severity assessment assumes platform and service protections have been disabled or successfully bypassed. Newer Android protections and Google Play Protect can reduce the likelihood of successful exploitation, but do not replace the patch.

November 1 and November 5 are patch labels

The 2026-11-01 patch level covers the first group of issues, including the critical Framework flaw. A level of 2026-11-05 or later also covers the listed kernel and chipset-vendor issues, along with previous patch levels. These are security patch labels, not Android version numbers or promised update delivery dates.

Google Play system updates can deliver some of the listed fixes through Mainline components on Android 10 and later. They do not replace the full Android security update or cover all kernel and chipset issues, so a Google Play system update date alone does not show that every applicable November fix is installed.

Where to check—and why an update may not appear yet

Look in Settings for your Android version and security update level, then follow your manufacturer’s instructions to check for an available update. On Pixel phones, Google’s manual check is Settings → System → Software update.

Pixel updates roll out gradually, depend on the carrier and device, and may take a few weeks to arrive. For other Android phones, consult the manufacturer or carrier. If no update appears, check your model’s support status and rollout guidance.