Android security update: CERT-In rates flaws in Android 14 to 17 critical; how to check your phone’s patch level

CERT-In's note of 4 November covers 25 flaws in Android 14 to 17. Google's newer November bulletin lists a critical remote code execution bug, and patch level 2026-11-05 clears all its issues.

By Telugu Scope Desk

Published November 8, 2026 · 2 min read

A smartphone with a glowing blank screen on a dark wooden table, a padlock shape of light above it and clay oil lamps lit in the background

India’s cyber security agency CERT-In has rated a group of flaws in Android 14, 15, 16 and 17 as critical and told phone owners to install the latest Android security update. Its vulnerability note CIVN-2026-0536, issued on Wednesday, 4 November, says an attacker could use the bugs to take higher privileges on a phone, read sensitive data, run arbitrary code or cause a denial of service that stops it working.

The note lists 25 CVE entries in parts of the operating system that include the Framework and System components, and it also covers the Android 16 QPR2 build. It is addressed to individuals as well as organisations that use the affected versions. The full text is on the CERT-In website.

Which patch level closes the gaps

For the fix, CERT-In points to Google’s October 2026 Android Security Bulletin. Google says a phone on security patch level 2026-10-01 or later is protected against every issue in that bulletin. The worst of them sits in the System component and could let malicious code already on a phone raise its own privileges, with no tap needed from the owner.

Google has since published a newer bulletin. Released on Monday, 2 November, and revised on Friday, 6 November, it says patch level 2026-11-05 or later clears every issue it lists. Its most serious entry, a critical Framework bug that could allow remote code execution with no action needed from the user, is fixed from patch level 2026-11-01. The same bulletin lists critical flaws in MediaTek modem software and in one Qualcomm closed-source component, rated by the two chip makers themselves.

How to check your phone

Google’s help page sets out the steps. Open Settings, tap About phone, then Android version, and read the date shown under Android security update. To install a pending update, go to Settings, then System, then Software updates, and follow the prompts.

Google says its Android partners hear about the issues no less than a month before each bulletin goes public. Devices running Android 10 or later may also receive Google Play system updates alongside the monthly security patches.

Telugu Scope illustration.