Android this week: two surprise Pixel 11 patches, 180 vulnerabilities fixed, the Pixel Tablet is gone, and Samsung trims its update list

Here is the Android side of the week, in the order I think it matters. As always, when something comes from one outlet or a leaker rather than Google or Samsung, I say so.

Pixel 11 got patched twice, and neither one is QPR1

Google pushed a small out of cycle update to the Pixel 11, 11 Pro, 11 Pro XL, and 11 Pro Fold on September 1, build CD1A.260905.001.A1, under 100MB, with the changelog everyone has memorized by now: "This update fixes critical bugs and improves the performance and stability of your device." Then the rollout stopped. Not every phone got it, and it never showed up on Google's factory image page. On Wednesday, September 9, a second build appeared, CD1A.260905.001.B1, about 97MB, and this one did get posted to the official factory and OTA image pages. Droid-Life's read is that B1 is mostly the September security patch layered onto the earlier fix. Both builds are still the original Android 17 release, not Android 17 QPR1, which remains in beta (Source, Source).

I can add one data point the changelog will not. The A1 build is the one that fixed the cellular data drops on my Pixel 11 Pro XL, the ones bad enough that I packed a backup phone for a 90 minute drive. The full story, including what Google told a different owner on a recorded support call, is in my Pixel 11 Pro XL review. The B1 build installed on my unit this week without incident and the modem has stayed fixed. Two patches in nine days, both under 100MB, both with a generic changelog, is Google telling you there were launch bugs worth an emergency fix without ever saying what they were. I would rather have the fix than the changelog, but I would like both.

September's security bulletin: 180 fixes, one of them a no-click remote hole

The September 2026 Android Security Bulletin patches 180 vulnerabilities across two patch levels. The 2026-09-01 level covers 95 issues in the framework and system components, including a critical remote code execution flaw in System that needs no extra privileges to exploit. The 2026-09-05 level adds 85 more in the kernel and in Arm, MediaTek, and Qualcomm components, including critical NFC kernel and Protected KVM flaws. A phone on the 09-05 level has both sets (Source, Source). Samsung's own September patch detail lists 90 fixes for Galaxy devices, 58 from Google and 32 from Samsung, though 40 of Google's do not apply to Galaxy hardware (Source). Galaxy Z Fold 8 and Fold 8 Ultra got that patch first, in South Korea on Wednesday, as a roughly 1.08GB update, with a global rollout expected within days (Source).

The practical version: if your phone offers the September patch, take it, and if your phone no longer gets patches at all, this month is a good example of why that matters. Which brings me to Samsung.

Samsung revised its update roadmap

On Monday, September 8, Samsung updated its official One UI update schedule. The Galaxy Z Fold 3, Z Flip 3, Galaxy Watch 4, and Watch 4 Classic came off the list entirely, having completed their promised support window. The Z Fold 4 and Z Flip 4 moved from monthly to quarterly security updates, which is Samsung's signal that a device is in its final year. Newer phones, the Fold 8 line, the S26 and S25 series, and the Watch 9, stay on the monthly cadence, and the current baseline for those is One UI 9 on Android 17 (Source). If you are still carrying a Fold 3 or Flip 3, this is the official end. If you are on a Fold 4 or Flip 4, you have about a year of quarterly patches left, and this is the month to start thinking about what comes next rather than the month you get cut off.

The Pixel Tablet is gone

Google pulled the Pixel Tablet from the Google Store on Thursday with no announcement. Existing units keep getting updates through 2028, and there is no word on a successor (Source). I was never a fan of the hardware, but I am a fan of the idea, a tablet that lives on a speaker dock and becomes a shared home screen. Nobody has done that well, and now nobody at Google is doing it at all. If you want the closest thing, it is still an iPad on a stand, which is not a great answer for an Android house.

Google Messages picked up real features

Two useful ones rolled out to the stable app on Monday. Google Keep is integrated, so you can create and share a note inside a conversation with a live preview, and there are new chat themes, nine color options including Dynamic Color plus preset or custom wallpapers, replacing the old change colors option. Also worth knowing: Samsung Messages is being automatically replaced by Google Messages for US users on Android 14 and newer. In beta, Google is testing a customizable attachment grid, a redesigned long press menu, swipe based read receipts, and RCS reply and reaction parity ahead of iOS 27's RCS changes (Source).

Pixel 11 Pro Fold reviews: same phone, better main camera

The second wave of Pixel 11 Pro Fold reviews landed Thursday. PetaPixel's is the most detailed on cameras: the body is nearly unchanged from the Pixel 10 Pro Fold, the main camera moves to a larger Type 1/1.3 sensor, the telephoto and ultrawide are untouched and fall behind in low light, and there is a software bug that blocks repositioning the live preview when the phone is unfolded at an angle. Starting price is $1,899. That is one outlet's set of findings, and other reviewers covered the phone in late August (Source). I have a Pixel 10 Pro Fold and the "nearly unchanged body" line matches what I saw at the launch event. The iPhone Duo at $1,999 makes this the most interesting $100 gap in phones right now, and I intend to put the two side by side in October.

Context from just before the week

A few things from September 1 that shape this week: the September Android feature drop (Find Hub item memory and Motion Assist among others), the first Pixel Watch 5 update with Gemini and gesture upgrades, and the One UI 9 beta opening for the Galaxy S25 series in South Korea and India as a roughly 3.8GB download. Android 17 QPR1 is still in beta with no stable date confirmed, which is exactly why Google shipped the Pixel 11 fixes as separate hot patches instead of waiting.

What matters if you own one of these

Pixel 11: install B1, it is small and it is the one on the official image pages. Fold 3 or Flip 3: you are done getting patches, plan accordingly. Anything older than the September patch level: 180 fixes is not a month to skip. And if you are waiting on QPR1 for the bigger Pixel changes, keep waiting, this week was maintenance, not features.

Sources are linked inline: Google's Android security bulletin, 9to5Google, Droid-Life, SamMobile, SecurityWeek, and PetaPixel. Single-outlet findings are marked as such. Verified September 11, 2026. Five of my apps are in Google Play review as native Kotlin ports right now, with the same rule as the iPhone versions, no tracking, ever. The lineup is at jcmobileappstudio.com/apps.