Mobile
Security incidents tagged Mobile. Newest first.
1 Mobile incident in the last 12 months
- Incidents
- 1
- Live
- 1
- Patched
- 1
- Days without an incident
- 2
- Longest quiet run: 1 day (Nov 3–Nov 3)
Sponsored
Brought to you byTinkerer Club
The private club for people who own their servers, run their own AI, and pay $0/month for software.
- Patched
Android November 2026 bulletin: critical Framework RCE with no user interaction (CVE-2026-58868)
Google's Android Security Bulletin for November 2026, published Nov 2, says the most severe issue is CVE-2026-58868, a critical Framework remote-code-execution bug that needs no additional privileges and no user interaction. It affects Android 14, 15, 16, 16-qpr2 and 17. The same 2026-11-01 patch level also includes two critical System RCEs (CVE-2026-58876, CVE-2026-58936) and the already-tracked SMS-of-death DoS (CVE-2026-58882). The 2026-11-05 patch level adds kernel and vendor fixes. Update devices to security patch level 2026-11-01 or later (2026-11-05 for the full set). Google said it notifies partners at least a month before publication; there was no claim of in-the-wild exploitation for CVE-2026-58868 in the bulletin.
Android (Framework / System)Since Nov 2, 2026
