Google Pixel Owners Urged to Patch High-Security Modem Flaw

Google has released its September 2026 Pixel Update Bulletin, fixing 110 vulnerabilities, including one that could give an attacker more power on a device if they already have a foothold. This bug is not described as a simple remote takeover but as a vulnerability that could lead to the escalation of privilege (EoP) with no additional execution privileges or user interaction needed.

The vulnerability affects the modem component of Pixel devices and is rated high severity. The modem handles communication with mobile networks, allowing a phone to connect for calls, texts, and data. A flaw affecting it deserves attention, even if the conditions needed to exploit it limit the number of potential victims.

Google says there are indications that the vulnerability, tracked as CVE-2026-58704, may be under limited, targeted exploitation. An attacker needs access to an adjacent network and basic privileges on the targeted device but does not explain how those privileges are obtained. This bug can be especially useful in targeted operations when combined with another exploit or a malicious app.