Google Android Multiple Vulnerabilities CVSS 7.3

CERT-Bund published a security advisory identifying multiple vulnerabilities in Google Android operating system. The vulnerabilities carry a CVSS Base Score of 7.3 (high) and enable remote attackers to execute unspecified attacks and denial of service attacks against affected devices. Two product versions are affected: Android security patch levels prior to 2026-04-01 and prior to 2026-04-05. Mitigation measures are available through software patching.

Organizations and consumers using Android devices must prioritize applying the latest security patches immediately. Device manufacturers and organizations distributing Android devices should ensure that security patch levels are updated to at least April 2026 standards. The advisory indicates remote attack capability, meaning exploitation can occur over a network without physical device access, increasing urgency for patching.