Android Security Bulletin June 2026

"The most severe vulnerability in this section could lead to local escalation of privilege with no additional execution privileges needed."

I've never seen this many critical-severity CVEs fixed in one month's release.

Most of that is probably Mythos-related.

But there's also a critical zero-day currently being exploited in the wild.

"User interaction is not needed for exploitation."