Android 17: October security update rollout on Pixel and Samsung devices

Google published the Android security bulletin for October 2026 on October 5, with an update on October 8. This document details the vulnerabilities affecting Android devices and establishes that security patch levels of 2026-10-01 or later resolve all listed issues. The release aligns with the Trunk Stable development model, where source code is sent to AOSP in the second and fourth quarters to ensure platform stability.

For users, this date is the reference point to know if their device is protected against the latest threats. The bulletin indicates that source code fixes were released in the Android Open Source Project (AOSP) repository, allowing manufacturers to integrate solutions into their own operating system versions. The importance of this patch lies in addressing critical flaws that could compromise personal data security and system integrity.

The October update for Android 17 began rolling out on Pixel devices on October 6, 2026. According to the Pixel Update Bulletin, this version fixes a total of 28 security vulnerabilities, six of which are classified as critical. It also includes three functional bug fixes related to the virtual keyboard, audio during VoIP calls, and incorrect orientation of saved photos and videos.

The deployment covers nearly the entire current Pixel line, from the Pixel 6 to the Pixel 11 Pro Fold. Build numbers vary by device generation; for example, Pixel 6 to 7a and Tablet/Fold models receive build CP3A.261005.002.A1, while Pixel 8 and later receive CP3A.261005.005. Notably, according to Google, this is the last regular update for the Pixel 6 and 6 Pro, marking the end of their monthly support cycle.

Samsung published details of its October security update on October 6, 2026, fixing nine critical vulnerabilities in Android, along with dozens of high and moderate severity flaws. The update also addresses Samsung-specific vulnerabilities, including several that could allow attackers with local access to execute arbitrary code. This patch arrives at a key moment, as Samsung is expanding One UI 9 and Android 17 across its Galaxy line.

Deployment on Samsung follows a gradual schedule. Flagship devices, such as the Galaxy S23 to S26 series, Z Fold, and Z Flip, receive monthly updates, while other models, like the A series, receive quarterly updates. In October 2026, Samsung added three new devices to the quarterly list (Galaxy A07s, A08, and A18) and removed two older models (A04s and A23 5G) that likely reached the end of their software lifecycle. Samsung users must check update availability on their specific devices, as deployment may take several days to complete across all regions.

The Android security bulletin for October 2026 addresses 25 vulnerabilities in the Framework and System components. Among these, seven are of critical severity, including a local privilege escalation in the System component that requires no user interaction or additional execution privileges. Other fixed issues include privilege escalation, denial of service, remote code execution, and information disclosure.

Pixel and Android Automotive OS devices receive additional fixes for critical and high-severity errors. Although no real-world exploitation has been reported, users are advised to update their devices immediately to mitigate potential risks. The difference between the number of vulnerabilities in the general Android bulletin (25) and the specific Pixel bulletin (28) is due to the Pixel bulletin including additional fixes specific to Google devices, in addition to those in the general bulletin.

To check if your device has received the October 2026 update, follow these steps: 1) Go to Settings > System > Software update. 2) Look for the option to check for updates. 3) If the update is available, install it. 4) To verify the security patch level, go to Settings > About phone (or About device on Samsung). 5) Find the Security patch level line. It should indicate 2026-10-01 or later for Android, or 2026-10-05 or later for Pixel devices.

If the update does not appear available, ensure your device is connected to a stable Wi-Fi network and has sufficient battery. In some cases, deployment may be gradual, so it may take several days to reach all users. If your device is not compatible with the latest Android version, check your manufacturer's support website to see if it will receive future security updates. It is crucial to keep the operating system updated to protect personal data and avoid known vulnerabilities.

It is important to distinguish between the monthly security update and the new features of Android 17. The October 2026 update is primarily a security patch that fixes critical vulnerabilities and minor functional errors, such as those related to the keyboard and audio on Pixel. It does not introduce new user features, as these were included in the QPR1 update in September.

In the case of Samsung, the expansion of One UI 9 and Android 17 includes new user experience features, such as changes to the lock screen security policy, which reduces the number of unlock attempts to prevent brute-force attacks. These security changes in the user interface are part of the software update but should not be confused with the monthly security patch, which focuses on fixing operating system vulnerabilities. Users must ensure they install both updates to benefit from security improvements and new features.