Google fixes 124 Android security flaws including one that's actively exploited

The June security update for Android is one of the largest of the year. In total, it fixes 124 vulnerabilities. One of them is particularly serious because attackers are already actively exploiting it. Anyone using an Android smartphone should check their patch level and install the update as soon as it is available.

One vulnerability is already being exploited

The critical vulnerability is tracked as CVE-2025-48595 and is found in the Android Framework, meaning it sits deep in the OS. It allows an attacker to gain elevated privileges on the device without any user action. Google says there are signs of limited, targeted attacks. The company has not disclosed who is behind them or exactly how the flaw is being abused. Devices running Android 14, 15, 16 and Android 16 QPR2 are affected.

What else is included in the update

In addition to the actively exploited flaw, Google fixes 123 other vulnerabilities. The update is being released in two stages. The June 1, 2026 security patch level covers Android’s core components, including 18 vulnerabilities rated critical. The June 5, 2026 security patch level also includes fixes for the kernel and chipmaker drivers, including those from Qualcomm and MediaTek. For protection, it is enough for your device to reach either of these two patch levels.

Why many devices are still unprotected

Whether and when the update arrives depends heavily on the manufacturer. Google’s Pixel devices are usually first in line, though the rollout is typically staged. Current Samsung Galaxy models often receive the patch within a few days. On an affordable mid-range phone that is already two years old, however, it can take weeks. That is exactly why many users have not yet installed the update, even though it is already available for their device.

How to check your patch level

You can find your device’s security level in the settings. Open Settings, then Security and privacy, then System and updates. The Security update section shows a date. If it says June 1, 2026 or June 5, 2026, your device is up to date. If it shows an older date, search for updates in the same menu and install whatever is offered. Some manufacturers use slightly different menu names, but the principle is the same.

An update only takes a few minutes. Given that one of the vulnerabilities is already being exploited, that is time well spent.