Google has patched severe Android vulnerabilities, some of which could allow attackers to gain control of a device without user interaction or execution privileges.