Google fixes actively exploited Android zero-day on Pixel devices

Google has released the September 2026 security update for Pixel devices, addressing 110 vulnerabilities, including a zero-day flaw (CVE-2026-58704) under limited, targeted exploitation. The vulnerability resides in the Cellular Modem subcomponent and stems from a logic error leading to improper authorization, allowing adjacent network attackers with basic privileges to escalate privileges remotely without user interaction. The update is critical for all supported Pixel devices to mitigate potential exploitation.

AI-extracted · verify before operational use