Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction

Google has issued patches for a critical Android flaw, CVE-2026-58868, that could allow an attacker to run code remotely without any user interaction, The Hacker News reports. The flaw affects Android 14 through 17, and fixes are included in devices with the 2026-11-01 security patch level or later.