Android Security Bulletin — May 2026
Monday, 4 May 2026
- Vulnerabilities
- 1
- Critical
- 0
- High
- 1
- Zero-days
- 0
- Public exploit
- 1
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Public exploit code 1
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
- High 8.8