Google fixes actively exploited Android zero-day on Pixel devices
Google said the flaw let attackers escalate privileges without user interaction and patching now covers more than 200 security vulnerabilities.
- Google fixed a critical vulnerability in Pixel devices on Tuesday that was actively exploited in limited, targeted cyberattacks affecting the Cellular Modem.
- Tracked as CVE-2026-58704, the flaw allows a 'zero-click' attack that bypasses the need for User interaction, potentially enabling attackers to escalate privileges and access device data.
- CISA, via The Hacker News, issued a notice classifying the bug as a 'known exploited vulnerability,' while TechCrunch reported Google has not identified the attackers or confirmed affected models.
- Google Pixel users should install the latest security update rolling out now, which patches the exploited flaw alongside over 200 other security vulnerabilities.
- Surveillance vendors frequently abuse such vulnerabilities to sell data-stealing software to governments, and these exploits pose significant risks to the federal enterprise.
33 Articles
33 Articles
Google Confirms Pixel Modems Fell to Silent Zero-Click Attacks
Google confirmed limited targeted exploitation of a zero-click privilege escalation bug in Pixel cellular modems. CVE-2026-58704 allowed remote attackers to bypass permissions without user interaction. The September 2026 patch fixes it along with over 200 other issues. Owners should update immediately.
There’s a serious security fix hiding in Google’s September Pixel update
Credit: Adamya Sharma / Android Authority TL;DR Google’s September Pixel security update patches a cellular modem vulnerability that may have been used in limited, targeted attacks. CVE-2026-58704 could allow a remote attacker to bypass permission checks and escalate privileges without requiring any interaction from the victim. CISA has added the flaw to its Known Exploited Vulnerabilities list. Google just released the September Pixel Drop, al…
Google Pixel phones pwned in zero-click attacks
CISA gives federal agencies just 3 days to patch
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
















