
Android’s March patch fixes 129 flaws, including a targeted zero-day in Qualcomm GPUs
Google’s March Android security update closes 129 vulnerabilities, several high severity, including a zero-day in Qualcomm graphics hardware (CVE-2026-21385) already seen in targeted attacks. Patches arrive in two levels (2026-03-01 and 2026-03-05); Pixel devices typically update first, while other OEMs and carriers may delay. Users should install the update promptly, keep Google Play Protect enabled, and practice standard defenses (avoid unknown apps, use strong device security) to mitigate risk from remote code execution and privilege-escalation flaws.













