Google patches critical Android adbd vulnerability

9 articles · Updated · heise online · May 5

The fix in patch level 2026-05-01 affects supported Android 14, 15, 16 and 16qpr2 devices, including Google Pixel and some Samsung models.
Google said CVE-2026-0073 could let attackers remotely execute malicious code through the adbd debugging module, potentially fully compromising smartphones and tablets.
There is no indication the flaw is being exploited, but Android 13 lost support in March and no longer receives patches, leaving millions of devices exposed.

Why can't Google directly patch this critical flaw on millions of phones, leaving users waiting for manufacturers to act?

Is your older Android phone secretly vulnerable to a 'zero-click' hack that could compromise all your personal data?

With new botnets weaponizing Android TV, is this phone vulnerability part of a larger attack on our smart homes?