Google Patches High-Severity Flaw in Pixel Cellular Modem

Google has issued a patch for a high-severity security flaw in its Pixel Cellular Modem, which is believed to have been exploited in the wild. The vulnerability, tracked as CVE-2026-58704 with a CVSS score of 8.0, allows for privilege escalation and does not require user interaction.

The bug is described by Google as a logic error in the code that could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed.

In addition to CVE-2026-58704, Google has addressed 109 other security flaws in its latest Pixel updates for September 2026. Of these, 88 are high-severity privilege escalation vulnerabilities, while two are critical-severity vulnerabilities that could lead to remote code execution.