Critical Android “Zero-Interaction” Vulnerability Enables DoS Attacks

Google's April 2026 Android Security Bulletin discloses CVE-2026-0049, a critical "zero-interaction" Android Framework vulnerability enabling local denial-of-service without user action, and CVE-2025-48651, a high-severity StrongBox hardware key-storage flaw affecting multiple vendors; Google is issuing patches grouped into 2026-04-01 and 2026-04-05 patch levels and urges immediate updates.