Android March Security Update Patches Actively Exploited Qualcomm Display Zero-Day
Active Exploitation · 2 sources · Updated 4mo ago · First seen Mar 3, 2026
Google’s March Android security update addressed 129 vulnerabilities, including one actively exploited high-severity memory-corruption flaw in an open-source Qualcomm display component tracked as CVE-2026-21385. Google warned the issue “may be under limited, targeted exploitation,” and reporting indicated Qualcomm marked the vulnerability as exploited; Qualcomm stated it provided fixes to customers in January 2026 and urged end users to apply OEM-delivered device updates as they become available.
Separately, the Canadian Centre for Cyber Security issued multiple vendor rollups and advisories on March 2, 2026, including an Android monthly rollup (AV26-187) pointing organizations to the Android Security Bulletin for patching guidance. Additional Canadian advisories covered unrelated vulnerability sets in Veeam Kasten for Kubernetes (AV26-188), VMware Tanzu products (AV26-186), Red Hat (including Linux kernel updates) (AV26-184), CISA ICS advisories for multiple OT/IoT products (AV26-183), Dell infrastructure products (AV26-181), and IBM enterprise software (AV26-180); these are general patch-notification items and do not provide details tied to the Android/Qualcomm zero-day beyond directing readers to apply vendor updates.
