Critical Remote Code Execution Vulnerability in Android Systems

Heise.De

Critical Remote Code Execution Vulnerability in Android Systems

First seen 5 May 2026, 11:32 UTC • •72.6

Article Content

1 / 18

Browse articles

ThreatCluster •May 6, 2026 at 09:27 UTC

•CVE-2026-0073 allows remote code execution without user interaction.
•Affected systems include Android versions 14, 15, and 16.
•Users are advised to update their devices immediately to mitigate risks.

On May 4, 2026, Google published the Android Security Bulletin addressing a critical vulnerability tracked as CVE-2026-0073. This flaw, located in the System component of Android versions 14, 15, and 16, allows attackers to execute code remotely without user interaction. Devices still under support, including Google's Pixel series and select Samsung devices, are affected. The vulnerability poses a significant risk as it can lead to complete system compromise. Users are urged to install the latest security updates to mitigate this risk. The vulnerability was not known to be actively exploited at the time of the announcement. Android 13 is no longer receiving security patches, leaving millions of devices vulnerable. Security updates are being released quarterly, with critical vulnerabilities prioritized for immediate attention.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 155d ago How this analysis works

Timeline

2026-05-04

CVE-2026-0073 published in Android Security Bulletin

2026-05-05

Security updates released for affected devices

More articles in this cluster (17)

Threat Graph

5 entities, 4 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Remote Code Execution
Zero-day Exploit
T1203 - Exploitation for Client Execution

Vulnerability (1)

CVE-2026-0073

Affected Platform (1)

Android

Relationships

CVE-2026-0073 targets Android
Remote Code Execution targets Android
Zero-day Exploit targets Android
T1203 - Exploitation for Client Execution targets Android

Following this threat?

Track CVE-2026-0073 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

MikroTik RouterOS Vulnerabilities Enable Pre-Auth SSH Takeover Two critical vulnerabilities, CVE-2026-67279 and CVE-2026-86060, allow unauthenticated SSH takeover of MikroTik RouterOS. CVE-2026-67279 exploits a state-machine flaw permitting rekey requests before authentication, while CVE-2026-86060 allows argument injection to gain full admin access. These vulnerabilities have…

CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…