Google fixes actively exploited Android zero-day on Pixel devices
Google patched 110 Pixel flaws including CVE-2026-58704, a modem privilege-escalation zero-day under limited targeted exploitation.
Google's September 2026 Pixel security update fixes 110 vulnerabilities, including CVE-2026-58704, a high-severity zero-day in the Cellular Modem subcomponent that Google says is under limited, targeted exploitation. The improper-authorization flaw lets attackers with adjacent network access and basic privileges escalate privileges without user interaction. The bulletin also includes 12 remote code execution and 89 privilege escalation flaws rated critical or high severity.
- CVE-2026-58704 is a modem permission-bypass zero-day under limited, targeted exploitation
- Exploitation requires adjacent network access and basic privileges, with no user interaction
- September update fixes 110 flaws: 12 RCE and 89 privilege escalation issues rated critical/high
- Pixel devices receive separate patches from standard Android OEM monthly updates
- In June Google fixed Android Framework zero-day CVE-2025-48595, also actively exploited
- Vendors
- Organizations
- Countries
- United States
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-48595 | Integer Overflow Local Privilege Escalation in Android Framework | 8.4 | 2% | KEV | KEV |
| CVE-2026-58704 | Permission Bypass in Google Pixel Cellular Modem Allows Proximal Privilege Escalation | 8.8 | <1% | KEV | KEV |
From the original article
2 min read at bleepingcomputer.comGoogle has released the September 2026 security patches to address 110 vulnerabilities affecting its Pixel devices, including one zero-day flaw actively exploited in targeted attacks. [...]
By Sergiu Gatlan · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.