Android Security Update Fixes 129 Vulnerabilities, Including Actively Exploited Zero-Day

Google released its March 2026 Android Security Bulletin, patching 129 vulnerabilities across the Android ecosystem.

This update sets a record for the highest number of fixes in a single month. It splits into two patch levels: 2026-03-01 for core Android flaws and 2026-03-05 for hardware-specific issues.

Device makers can roll out the first level quickly, then add the rest.

The Zero-Day Alert: CVE-2026-21385

The standout threat is CVE-2026-21385 in Qualcomm’s Display and Graphics component. Google warns of limited, targeted exploitation in the wild.

This high-severity integer overflow leads to memory corruption, letting attackers bypass security and compromise devices. Zero-days in display tech often aid advanced hackers in real-world attacks.

The 2026-03-01 patches fix severe flaws in Android’s base:

• CVE-2026-0006 (System): Critical remote code execution (RCE) with no user interaction needed; attackers could seize control remotely.
• CVE-2025-48631 (System): Critical denial-of-service (DoS) that crashes devices remotely.

Other fixes target framework and system elevation-of-privilege (EoP), information disclosure (ID), and DoS issues, all high severity.

Core Android Platform (2026-03-01)

Kernel/Virtualization (2026-03-05)

Vendor/Hardware (2026-03-05)

The 2026-03-05 level patches kernel EoP in pKVM and Hypervisor, plus high-severity issues from Qualcomm, Arm, Imagination Technologies, MediaTek, Unisoc, and OEMs like VBMeta.

Update to 2026-03-05 or later via your device maker. Enable Google Play Protect for ongoing app scanning.

Google will push AOSP source patches within 48 hours. Unpatched devices risk RCE, EoP, and crashes. Act fast against this zero-day and critical vulnerability.

Follow us on Google News , LinkedIn and X to Get More Instant Updates. Set Cyberpress as a Preferred Source in Google.