Google has published the November Android security bulletin. This time 216 vulnerabilities are fixed, 23 of them rated critical. The most serious one is in the Framework component (CVE-2026-58868): according to Google's assessment, it allows remote code execution on the phone without any action from the user.
The update covers Android 14, 15, 16 and 17. None of these flaws is currently reported as exploited in real attacks, but technical analyses usually follow a bulletin quickly.
The update comes at two levels: 2026-11-01 and 2026-11-05. The second one also includes kernel and vendor component fixes, so that is the one to aim for. You can see your phone's level under "Security" or "About phone" in the settings.
Pixel devices get the update first. Samsung, Xiaomi and other makers roll it out on their own schedules, days or weeks later. Until then, install apps only from Google Play and keep automatic updates turned on.
For companies whose staff use phones for work e-mail and documents, this is also a good reason to check their devices: older models that no longer get updates become the weakest link.
Sources: SecurityWeek, DigitBin.
