Android Zero-Day Exploited: March 2026 Security Update Details

Google has released its March 2026 Android security update, addressing a total of 129 vulnerabilities, including a critical flaw and a high-severity zero-day vulnerability actively exploited in the wild. The update includes fixes for 10 critical-severity bugs across System, Framework, and Kernel components.

Qualcomm Vulnerability Under Targeted Attack

The exploited vulnerability, CVE-2026-21385, affects a Graphics component in open-source Qualcomm code used in Android devices. Qualcomm describes the flaw as a buffer over-read caused by “memory corruption when adding user-supplied data without checking available buffer space,” essentially an integer overflow . Google acknowledged “indications that CVE-2026-21385 may be under limited, targeted exploitation” .

Qualcomm was initially alerted to the vulnerability by Google’s Android Security team on December 18, 2025, and notified customers on February 2, 2026 . The vulnerability impacts 235 Qualcomm chipsets .

Critical Vulnerabilities Addressed

Beyond the actively exploited zero-day, Google’s March update resolves ten critical vulnerabilities. These include a critical flaw in the System component allowing for remote code execution without requiring additional privileges or user interaction . Other critical vulnerabilities addressed include a privilege escalation bug in the Framework (CVE-2026-0047), a denial-of-service (DoS) in the System (CVE-2025-48631), and seven privilege escalation flaws in Kernel components (CVE-2024-43859, CVE-2026-0037, CVE-2026-0038, CVE-2026-0027, CVE-2026-0028, CVE-2026-0030, and CVE-2026-0031) .

Patch Levels and Rollout

Google has issued two patch levels – 2026-03-01 and 2026-03-05 – to provide flexibility for Android partners in addressing the vulnerabilities . Pixel devices are expected to receive the updates first, with other Android device manufacturers, such as Samsung, OnePlus, and Xiaomi, rolling out patches in their respective update cycles.

Ongoing Google-Qualcomm Collaboration

Despite Google developing its own Tensor chips for Pixel devices, the partnership with Qualcomm remains strong, spanning projects like Android on PC and Qualcomm’s automotive platforms . The collaboration between the two companies continues to evolve, extending beyond Android into areas like automotive and AI .