Google Confirms Zero-Day Exploitation in Pixel Phones Leading to Unauthorized Access

Google confirmed a zero-day vulnerability (CVE-2026-58704) in Pixel phone modems enabled silent privilege escalation attacks without user interaction. The flaw, exploited by surveillance vendors, was patched but highlights ongoing risks in mobile device security.

The Pixel phone maker said there are indications that a bug in the phone's modem "may be under limited, targeted exploitation."

Read original article