What is in the update

Every month Samsung bundles Google's Android fixes and its own into a Security Maintenance ReleaseSamsung's monthly security package for Galaxy devices, shortened to SMR. The November package, SMR Nov-2026, starts from Google's Android November 2026 security bulletin. Samsung's list applies 177 of the CVEs from that bulletin: 20 rated critical, 156 high and one moderate. It marks two as already fixed in earlier updates and 23 as not applicable to Samsung devices.

The critical ones include CVE-2026-58868, the Android Framework flaw that Google rates as the most severe of the month, and two other critical System bugs listed in that analysis, CVE-2026-58876 and CVE-2026-58936.

Samsung also includes four high-severity fixes from Samsung SemiconductorSamsung's chip division, which makes the Exynos processors and modems used in many Galaxy phones.

Samsung's own fixes

Samsung counts 24 SVESamsung Vulnerabilities and Exposures, Samsung's own ID for flaws in its software, each also linked to a CVE items in the package. The bulletin describes 17 of them and says that some others "cannot be disclosed at this time". Three are rated high:

  • SVE-2026-3546 (CVE-2026-21155): an out-of-bounds write in the bootloader that someone with physical access to the phone could use. It affects Android 14 to 17.
  • SVE-2026-4330 (CVE-2026-21152): a validation bug in a Samsung camera filter library that could let a local attacker run code, if the user takes an action that triggers it.
  • SVE-2026-4711 (CVE-2026-21153): a stack overflow in a system library, libsecuibc.so, that could let a local attacker run code.

The 14 moderate items are mostly permission mistakes in Samsung apps and services. Several in Samsung Contacts and its cover-screen widgets could let an app on the phone place a call without the permission it should need. Another, in the modem software, could let a local attacker with high privileges get around the SIM lock.

Samsung lists all of its items as privately disclosed and does not mention exploitation for any of them. Google's bulletin has no note of exploitation for its fixes either.

When your Galaxy gets it

The bulletin says the package is for "major flagship models" and warns that delivery time "may vary depending on the regions and models". It does not give dates for individual phones. Samsung adds that some patches from chip vendors may arrive in a later monthly package.

To see what your phone has, open Settings > About phone > Software information and look at Android security patch level. Our guide to checking the Android security patch level explains how to read that date. To look for the update, go to Settings > Software update > Download and install.

Sources

Primary sources we checked for this article: