Skip to content
Critical Android Vulnerabilities Patched in September 2026 Update

Critical Android Vulnerabilities Patched in September 2026 Update

First seen 9 Sep 2026, 06:44 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 10, 2026 at 04:46 UTC
  • •Google's September update fixes 180 vulnerabilities, including critical RCE flaws.
  • •CVE-2026-28662 allows remote code execution without user interaction.
  • •Samsung's update addresses 90 vulnerabilities, enhancing Galaxy device security.

Google's September 2026 Android Security Bulletin addresses 180 vulnerabilities, including 95 bugs from the 2026-09-01 patch level and 85 from the 2026-09-05 patch level. The most severe vulnerability, CVE-2026-28662, allows remote code execution without user interaction. Samsung's September update also fixes 90 vulnerabilities, including critical Android flaws that could enable remote code execution. Affected systems include Android devices with security patch levels prior to 2026-09-05. Organizations are urged to update their devices promptly to mitigate risks. The updates are crucial for maintaining device security and preventing potential exploitation. Security professionals should prioritize patching to protect against these vulnerabilities.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 44d ago How this analysis works

Timeline

2026-01-23
CVE-2026-0768 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-08-25
CVE-2026-19949 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-08-28
CVE-2026-82329 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-01
Android Security Bulletin published
Google released patches for 95 vulnerabilities, including critical flaws in the System component.
Securityweek
2026-09-01
CVE-2026-83548 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-01
CVE-2026-83549 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-05
Second part of Android update released
Patches for 85 additional vulnerabilities were included in the 2026-09-05 security patch level.
Securityweek
2026-09-08
CVE-2026-28662 published
A critical Wi-Fi-related memory corruption flaw was disclosed, allowing remote code execution.
Esecurityplanet
2026-09-09
Samsung's September update released
Samsung issued a security update addressing 90 vulnerabilities, including critical Android flaws.
Esecurityplanet
2026-09-09
Android Multiple Vulnerabilities identified
Multiple vulnerabilities were identified in Android, including RCE and privilege escalation risks.
Hkcert

More articles in this cluster (80)

Following this threat?

Track CVE-2026-0768 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (15)

1 / 4