Pixel 6 Security Update Arrives as Five-Year Support Window Closes

Google's October 2026 Pixel bulletin fixes six vulnerabilities, three of them critical, as the Pixel 6 and Pixel 6 Pro reach the edge of their five-year support window.

Pixel 6 and Pixel 6 Pro phones in multiple colorways laid out on a grey surface
The Pixel 6 and Pixel 6 Pro lineup in their launch colorways. Image: Google.

Google shipped its October 2026 Pixel security update on October 6, patching six vulnerabilities — three of them rated Critical — across the kernel and Pixel-specific components. The update lands in an unusually loaded week for Pixel 6 and Pixel 6 Pro owners: both phones launched on the US Google Store in October 2021, which means they are now sitting right at the edge of the five-year OS-and-security-update window Google promises for that generation. This is the last stretch in which Pixel 6 and Pixel 6 Pro are guaranteed to receive patches like this one at all.

The short version
  • Google's October 2026 Pixel bulletin (patch level 2026-10-05) fixes 6 CVEs: 3 Critical, 3 High, 0 Moderate.
  • Two fixes are in the Linux kernel; four are in Pixel-specific components, including Bluetooth and the Google-branded "GDMC" and "GSA" system components.
  • Pixel 6 and Pixel 6 Pro launched on the US Google Store in October 2021 and sit in Google's 5-year update tier — a window that, per Google's own policy page, is now expiring.
  • Google has not published an exact calendar date for when Pixel 6/6 Pro updates stop; multiple outlets reported in July 2026, citing Google's own Android 17 QPR2 Beta 1 release notes, that Android 17 QPR1 would be the devices' last major OS update.
  • Pixel 6a, Pixel 7 and Pixel 7 Pro, and Pixel 7a are still inside their own 5-year windows; Pixel 8 and later get 7 years.

What Google's October 2026 Pixel security update fixes

According to the Android Pixel Update Bulletin for October 2026, published by Google on October 6, 2026, the update carries security patch level 2026-10-05 and addresses six vulnerabilities on top of everything already fixed in that month's broader Android Security Bulletin. Two of the six are kernel-level flaws that affect any Android device running the same kernel version; the other four are specific to Pixel hardware and Google's own Pixel software components, meaning they won't appear in the monthly bulletins non-Pixel Android phones receive.

All six are rated Elevation of Privilege or Information Disclosure bugs — the kind that let a malicious app or a nearby attacker gain capabilities or read data it shouldn't, rather than remotely hijack a device outright with no user interaction. Google's bulletin, as usual, does not say whether any of the six were being exploited before the patch shipped; the company reserves that disclosure for issues it flags separately as under active or limited targeted exploitation, and October's bulletin carries no such flag.

The six vulnerabilities, broken down

Per the bulletin, three of the six flaws are rated Critical and three are rated High, with no Moderate-severity issues this month:

CVE IDComponentIssue typeSeverity
CVE-2026-55330Pixel — BluetoothElevation of PrivilegeCritical
CVE-2026-56952Pixel — GDMCElevation of PrivilegeCritical
CVE-2026-55307Pixel — GSAInformation DisclosureCritical
CVE-2026-56906Kernel — FsElevation of PrivilegeHigh
CVE-2026-56936Kernel — Wacom HIDElevation of PrivilegeHigh
CVE-2026-0198Pixel — GDMCInformation DisclosureHigh

The Bluetooth flaw (CVE-2026-55330) and the two GDMC bugs are the ones worth paying closest attention to: Bluetooth elevation-of-privilege issues are attractive to attackers because they can sometimes be triggered with limited or no prior access to the device, and GDMC-related bugs have shown up in several Pixel bulletins this year as Google continues hardening that component. As always, Google's own fix is the only one that matters here — there's no workaround or setting to toggle that closes these holes short of installing the update.

For comparison, Samsung's own October 2026 security update patched nine critical flaws across its Android skin — a reminder that this is a routine, industry-wide monthly cycle, not a Pixel-specific emergency. What makes this particular Pixel bulletin notable isn't the patch itself; it's which phones are — and soon won't be — eligible to receive it.

Pixel 6 and Pixel 6 Pro: this patch lands as the five-year clock runs out

Google's official Pixel software update policy splits its phones into tiers. Pixel 8 and later get seven years of OS and security updates from each model's US Google Store launch date. The Pixel 7 series, Pixel 6 series, Pixel 6a and the original Pixel Fold get five years. Pixel 5a and earlier no longer receive Android version or security updates at all. Pixel 6 and Pixel 6 Pro sit squarely in that five-year group.

Google's own device availability page lists both the Pixel 6 and Pixel 6 Pro as having gone on sale on the US Google Store in October 2021 — Google separately announced the phones on October 19, 2021, in a launch post on the Google blog, with sales starting days later. Counting five years from that October 2021 start puts the end of the guaranteed update window right around now, in October 2026 — which is why this particular monthly bulletin is likely to be one of the last, if not the last, that Pixel 6 and Pixel 6 Pro are guaranteed to receive under Google's published policy.

It's worth being precise about what Google has and hasn't said. The support page does not publish an exact day, week, or even a specific month for when a given device's update eligibility ends — it describes the policy in terms of "5 years of OS and security updates" from availability, without a published cutoff calendar. Separately, several outlets reported in July 2026 — citing Google's own release notes for the Android 17 QPR2 Beta 1 developer preview — that Google had confirmed Android 17 QPR1 as the last major Android version update Pixel 6 and Pixel 6 Pro would receive, with the two phones excluded from the QPR2 preview track that followed. That reporting lines up with Google's five-year policy and with the October 2021 launch timing, but it is secondary reporting on Google's beta release notes, not language Google has published as a standalone, dated "Pixel 6 end-of-life" announcement.

What "end of support" will actually mean for Pixel 6 owners

Once a Pixel exits its update window, two things stop arriving: new major Android version upgrades, and the monthly security patches like the one detailed above. The phone doesn't stop working, and Google doesn't push anything that disables it — it simply stops receiving the fixes that close newly discovered holes like the six in this month's bulletin. Over time, that gap matters more, not less, since new vulnerabilities keep surfacing in both the shared Android kernel and in Google's own Pixel components, and a Pixel 6 past its window would no longer get Google's fix for whichever of those come next.

Feature-wise, Pixel Drops — the quarterly bundles of new camera, Gemini and system features Google ships to supported Pixels — are also tied to the update window; Google's policy page notes the five-year tier "may also include" Feature Drops, on top of the core promise of OS and security updates. Apps will generally keep working for a while after updates stop, since Google Play services and most apps are updated independently of the OS, but running an increasingly outdated, unpatched OS is the main security trade-off involved.

Which Pixel phones still get updates — and for how long

Using Google's published five- and seven-year tiers against the US Google Store availability dates on Google's own device-availability page, here's roughly where each recent Pixel generation stands:

DeviceUS launchUpdate tierUpdates run through (approx.)
Pixel 6 / Pixel 6 ProOctober 20215 yearsAround October 2026 — now
Pixel 6aJuly 20225 yearsAround mid-2027
Pixel 7 / Pixel 7 ProOctober 20225 yearsAround October 2027
Pixel 7aMay 20235 yearsAround mid-2028
Pixel 8 and laterOctober 2023 onward7 years7 years from each model's own launch

These "approx." end dates are a straightforward five- or seven-year count from the launch month Google itself lists, not a cutoff Google has published device-by-device — treat the specific day as unconfirmed until Google says otherwise, the same caveat as with the Pixel 6 and 6 Pro above.

Should you keep using a Pixel 6 after updates stop?

A Pixel 6 or 6 Pro that's out of security updates isn't suddenly unsafe to turn on, but it does start accumulating unpatched risk with every month that passes, especially for bugs — like the Bluetooth and GDMC issues fixed this month — that Google rates Critical or High. For anyone who uses the phone for banking, work email, or as a primary device, that's the point at which the calculus shifts toward replacing it. For a secondary device, a kid's phone with restricted app access, or a device kept offline, the risk is lower and the phone can reasonably keep going for a while past its update window.

Your upgrade options: Pixel 6a, Pixel 7 series, trade-in

Owners who want to stay on a Pixel with active support have a few paths. The Pixel 6a, Pixel 7 and Pixel 7 Pro are all still inside their five-year windows and will keep receiving monthly security patches for at least another year from publication of this article; anything from Pixel 8 onward carries Google's newer seven-year commitment, which is the longest runway currently available on a Pixel. Google's current phone lineup is listed on the Google Store, including official trade-in pricing that can be applied toward a new Pixel at checkout — Google's store flow values a device, including a Pixel 6 or 6 Pro, during the purchase of a new phone, with the credit typically applied once the old device is received and inspected.

Switching phones also means moving a SIM over, and most current Pixels support eSIM alongside a physical SIM slot; if the move involves a carrier eSIM transfer, our eSIM explainer walks through how that process works. Anyone weighing a Pixel against a non-Pixel upgrade should also factor update length into the comparison directly — it's now a published, multi-year commitment from each Android maker, not a vague promise, and it varies by brand and even by individual model within the same brand.

What to do right now

Pixel 6 and Pixel 6 Pro owners should install the October 2026 update immediately if they haven't already — it's available regardless of where the device sits in its support window, and this specific bulletin is the one being discussed here. After that, check Settings > System > System update to confirm the device shows patch level 2026-10-05 or later. Anyone using the phone as a daily driver should start planning a replacement over the coming months rather than waiting for a specific cutoff date, since Google has not published one; the five-year policy language and the October 2021 launch date are the clearest signal available of how much runway is left.

What happens next

Google typically ships its next Pixel-specific bulletin in early November, alongside that month's broader Android Security Bulletin, and will keep doing so for every Pixel still inside its update window. Whether Pixel 6 and Pixel 6 Pro receive that November patch — or any after it — will be the clearest real-world confirmation yet of where Google has actually drawn the line on this generation, since the company has so far described the cutoff only in years-from-launch terms rather than a specific calendar date. We'll update this story if Google publishes a more specific end-of-support date for the Pixel 6 and Pixel 6 Pro, or if the devices stop receiving bulletins in the months ahead.

Frequently asked questions

What does Google's October 2026 Pixel security update fix?

It patches six vulnerabilities, rated three Critical and three High, at security patch level 2026-10-05. Two are in the Linux kernel; four are in Pixel-specific components, including Bluetooth and Google's GDMC and GSA system components.

Are Pixel 6 and Pixel 6 Pro still getting this update?

Yes. As of publication, both phones are still inside Google's five-year update window and are eligible for the October 2026 bulletin like every other currently supported Pixel.

When exactly do Pixel 6 and Pixel 6 Pro stop receiving updates?

Google has not published an exact date. Its policy promises five years of OS and security updates from a device's US Google Store launch, and Pixel 6 and Pixel 6 Pro launched in October 2021, putting the end of that window around now. Multiple outlets reported in July 2026, citing Google's own Android 17 QPR2 beta release notes, that Android 17 QPR1 would be the devices' final major OS update.

Which Pixel phones still get long-term software support?

Pixel 6a, Pixel 7, Pixel 7 Pro and Pixel 7a are still within their own five-year windows. Pixel 8 and every model released since get Google's newer seven-year update commitment.

Is it still safe to use a Pixel 6 once its updates stop?

It will keep working, but it will no longer receive fixes for newly discovered vulnerabilities, so the security risk grows over time. That matters more for a primary device than for a secondary or offline one.

What are my options if I own a Pixel 6 or Pixel 6 Pro?

Keep using it if the risk is acceptable for how you use the phone, or trade it in toward a new Pixel through Google's own trade-in program at checkout on the Google Store.

Sources

More on Pixel 6 End of Support →Pixel 6Pixel 6 ProGoogleAndroid securityPixel update policy
Nadia Osei
Written byNadia Osei

Nadia Osei covers mobile and consumer gadgets for Pandromeda: smartphones, tablets, smartwatches, earbuds and smart-home devices. She tracks launches, software updates and pricing across Apple, Google, Samsung and the rest, and builds comparisons from the manufacturers' published specifications.

More from Mobile & Gadgets

See all