Google has issued a crucial update for Pixel smartphones to remedy a zero-day vulnerability known as CVE-2026-58704, which was discovered in the modem of these devices. The update was rolled out on September 15, following indications of limited exploitation in targeted attacks.
This vulnerability posed a significant risk as it allowed privilege escalation, enabling potential attackers to escape the modem's isolated environment and access sensitive data on the device. Reports from TechCrunch indicate that the exploit could be executed without any interaction from the device owner, such as clicking a link or opening a file. Google has not revealed the identities of those who exploited this vulnerability.
The fix for this vulnerability was part of the security patch released on September 5, 2026, and it will be accessible to all supported Pixel models.
