Google’s March 2026 Android update patches 129 flaws, including an actively exploited Qualcomm zero-day, and urges users to install 2026-03-05.

Google has patched nearly 130 vulnerabilities in Android, including an exploited zero-day bug in the graphics component of Qualcomm chipsets.

The zero-day that Google has included in the March Android security bulletin, and cybersecurity experts have warned could enable an attacker to bypass security controls and assume device control.

If you use an Android phone, a silent threat may have been sitting inside your device for months. Not a virus you downloaded.

One is a zero-day that has been actively exploited.