India's cybersecurity agency CERT-In has warned that “Multiple vulnerabilities have been reported in the Android operating system”. It has rated them “CRITICAL” in its latest vulnerability note, issued on November 4, 2026.
\n\nThe flaws affect Android versions 14, 15, 16, 16-qpr2 and 17. The advisory is aimed at individuals and organisations that use these versions.
\n\nAccording to CERT-In, an attacker could exploit the flaws to gain elevated privileges, disclose sensitive information, execute arbitrary code or cause denial-of-service conditions on affected devices.
\n\nThe agency says the weaknesses sit in Android components including Framework and System. They could lead to remote denial-of-service, local elevation of privilege and information disclosure.
\n\nCERT-In puts the risk of privilege escalation, information disclosure and denial-of-service as high, and warns that exploitation could also disrupt affected devices.
\n\nThe advisory points to Google's Android Security Bulletin for October 2026, published on October 5 and updated on October 8. Google says the most severe issue is a critical flaw in the System component that could allow local escalation of privilege.
\n\nAn attacker would need no additional execution privileges, and no user interaction is required. The most severe Framework flaw could cause remote denial of service under the same conditions.
\n\nGoogle…
Original source: https://www.cnbctv18.com/technology/
