Google patches actively exploited Android zero-day in September Pixel update

Google's September 2026 security patch for Pixel devices fixes 110 vulnerabilities, including one zero-day actively exploited in targeted attacks. The specific exploit chain and victim profile remain undisclosed, but the active exploitation indicates a state-level or sophisticated threat actor. This is a routine monthly patch cycle, though the zero-day elevates its significance for enterprise and government device fleets.