Google Releases Android Update to Patch Critical Remote Code Execution Vulnerability in System Component

Wed, 06 May 2026 17:01:00 +0200

Google has issued a security update for the Android operating system to address a critical remote code execution vulnerability identified as CVE-2026-0073. The flaw resides in the System component, specifically affecting the Android Debug Bridge (ADB) daemon. This vulnerability could allow an attacker to execute arbitrary code on affected devices with shell user privileges without requiring any user interaction, making it particularly concerning for device security. According to Google, there have been no reported instances of this vulnerability being actively exploited in the wild. The update is part of Google's ongoing efforts to strengthen Android's security posture. Notably, the company did not release updates this month for related platforms including Wear OS, Pixel Watch, Android XR, or Android Automotive. In addition to the patch, Google highlighted enhancements to its bug bounty program, offering increased payouts for reports of severe vulnerabilities in Android. This move aims