Samsung Releases June 2026 Patch Fixing 45 Vulnerabilities Including Active Zero-Day

In June 2026, Samsung issued a security update that resolves 45 vulnerabilities affecting Galaxy smartphones and tablets running Android versions 14, 15, and 16. Among these, a privilege-escalation zero-day flaw in the Android Framework (CVE-2025-48595) is actively exploited, according to CyberInsider.

The update incorporates 33 patches from Google's June 2026 Android Security Bulletin, which include five critical and 28 high-severity fixes. Samsung supplements these with 11 additional Samsung Vulnerability and Exposure (SVE) patches and one fix targeting the Exynos chipset, totaling 45 addressed vulnerabilities.

The zero-day vulnerability CVE-2025-48595 allows attackers to gain elevated system privileges on any Android version without user interaction. Another notable issue is a Bluetooth LE vulnerability (CVE-2026-0097) highlighted by Heise Online, which can be exploited remotely by nearby attackers without any user action.

Samsung's proprietary fixes target One UI components such as Smart Suggestions, Samsung Account, Samsung Cloud, and Theme Manager, all compatible with Android 14 through 16. Additionally, Exynos-powered devices using chips 2400, 2500, and 2600 receive a patch for a use-after-free bug in the DRM HDR driver that may cause kernel crashes.

Galaxy S26 users enrolled in the One UI 9.0 Beta 2 program in the US and UK have already received the June patch bundled with the beta update. The stable version is anticipated to roll out to the broader S26 lineup via carriers like Verizon and O2 within approximately two weeks.

Following the S26, mid-range Galaxy A and M series devices, along with Galaxy Z foldables, are slated to receive the update in the upcoming weeks, though Samsung has not provided exact release dates for these models.

To manually verify availability, users can navigate to Settings → Software update → Download and install. If the update is not yet visible, it is expected to arrive soon as Samsung deploys updates regionally and by carrier.

Samsung's June 2026 security patch addresses 45 vulnerabilities across Galaxy devices running Android 14, 15, and 16.