Google has released an update for Android addressing a remote code execution vulnerability.

Google released an Android update addressing CVE‑2026‑0073, a critical remote code execution flaw in the System component. The vulnerability affects the Android Debug Bridge daemon and can be exploited without user interaction to execute code as the shell user. Google noted that no exploitation has been observed and that no updates were issued this month for Wear OS, Pixel Watch, Android XR, or Android Automotive. The company also highlighted increased bug bounty payouts for severe Android vulnerabilities.

Read more:

https://www.securityweek.com/critical-remote-code-execution-vulnerability-patched-in-android-2/