Google’s annual review of zero-day exploits has raised concerns about the effectiveness of patches and the handling of known vulnerabilities in the Android ecosystem. The report questions whether zero-day vulnerabilities are even needed on Android since as soon as Google becomes aware of a vulnerability, it becomes an n-day flaw, regardless of patch status. This means that attackers can exploit known vulnerabilities without having to worry about a patch being available.
