New Android 14, 15 And 16 Update Fixes Actively Exploited Security Flaw

Google's latest security patch for Android 14, 15, and 16 fixes a zero-day vulnerability already being exploited in limited, targeted attacks. The flaw underscores the persistent threat to mobile users and the urgency of applying updates immediately.

The U.S. tech giant confirmed on June 2, 2026, that it has released security updates for Android 14, 15, and 16 to address a zero-day vulnerability exploited in the wild. The company warned that the flaw is “under limited, targeted exploitation,” meaning attackers have already weaponized it against specific victims. While Google declined to name the threat actors, such targeted exploitation typically involves nation-state spyware or advanced persistent threats.

This marks the third actively exploited zero-day patched in the Android ecosystem in 2026, highlighting an accelerating trend of mobile vulnerability disclosure. The flaw likely resides in the Android kernel or a privileged system component, as Google's advisory rated it as “Critical” severity. Historically, similar vulnerabilities have been chained with other exploits to gain full remote code execution or persistent device access.

The update rolls out automatically to Pixel devices and is available as a system update for other Android OEMs. Google’s monthly security bulletin includes patches for over 50 vulnerabilities, but the zero-day stands out because attackers have already used it. Security researchers recommend enabling automatic updates and rebooting promptly after installation.

For enterprise users, this update is critical because targeted exploitation often aims at high-value individuals: journalists, dissidents, or executives. Google's Threat Analysis Group is likely working with partners to identify victims and block attack infrastructure. The broader implication is that even with Google's monthly patch cycle, zero-days used in targeted attacks can remain dangerous for days or weeks before a fix propagates.

Looking ahead, users should expect Google to release a supplemental patch if additional variants of the exploit surface. Android's fragmented update ecosystem means many devices may never receive this patch, leaving hundreds of millions of users exposed. The incident will likely fuel renewed calls for mandatory security updates for all Android devices, regardless of manufacturer support.