On September 15, 2023, Google announced security patches addressing 110 vulnerabilities in its Pixel smartphone lineup. Among these, CVE-2026-58704 is particularly important as it has been exploited in targeted attacks.

Read More

Google Pixel devices receive dedicated security updates, separate from regular Android updates, due to the unique hardware and software configurations specific to these smartphones. While Pixel phones run on Android and receive monthly Android Security Bulletins, Google also publishes a Pixel Update Bulletin that specifically details vulnerabilities related to its devices.

The September 2023 bulletin highlights various vulnerabilities affecting specific Pixel hardware components, including the modem, bootloader, GPU, and fingerprint scanner. Security issues can arise from differences in hardware across other manufacturers' devices, which is why separate updates are warranted.

CVE-2026-58704 is a zero-day vulnerability affecting the Cellular Modem component of Pixel devices. A logic error in the code allows for the bypassing of permission checks under certain conditions. Successful exploitation can grant attackers elevated privileges, enabling broader access to the device's functions and data through a compromised cellular network or a malicious base station.

While the specifics of exploiting CVE-2026-58704 remain undisclosed pending the installation of patches, Google indicates that limited exploitation has been observed.

Of the 109 other vulnerabilities patched, 62 are rated high and 46 are classified as critical. Nine flaws fall under the category of remote code execution (RCE), which allows attackers to run malicious code remotely, while 88 vulnerabilities involve elevation of privilege (EoP)—including CVE-2026-58704. Additionally, there are 10 vulnerabilities that could result in information disclosure and two that might lead to denial of service (DoS).

Users are strongly advised to promptly install the updates to secure their devices. To do so, they can navigate to Settings → Security & privacy → System & updates → Security update → Install. It is also recommended that all smartphone users, not just Pixel owners, regularly update their devices and avoid installing applications from unverified sources. Reading app reviews can also help identify potential malware threats.