GoKawiilGoogle patches zero-day Pixel modem flaw exploited in targeted attacks
Google disclosed that a vulnerability in Pixel phones' modem software, tracked as CVE-2026-58704, was exploited in a limited number of targeted attacks before being patched this week. The flaw allowed attackers to escalate privileges from the isolated modem component into the phone's broader system without any user interaction, a so-called zero-click exploit. Google has not identified who carried out the attacks.
GoKawiil's interpretation of the reporting above, not reported fact.
Zero-click modem vulnerabilities are especially dangerous because they require no action from the victim, making them attractive tools for spyware vendors and government surveillance operations targeting journalists, activists, or dissidents. The lack of disclosure about who exploited the bug underscores the murky market for such exploits and the limited transparency phone makers offer even after patching known threats.
- Google patched a Pixel modem flaw (CVE-2026-58704) already used in real-world attacks.
- The bug enabled zero-click privilege escalation, requiring no victim interaction.
- Google has not disclosed the attacker's identity, though such flaws are often linked to spyware vendors.
Google Pixel 9 Pro — Staying current with the latest Pixel model means faster access to Google's security patches, like the one just released for this zero-day modem exploit. Keeping your device updated is one of the best defenses against zero-click attacks, and newer Pixels get priority support and updates directly from Google.
See Google Pixel 9 Pro on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: techcrunch.com — Zack Whittaker, 2026-09-16
Published there as: “Google says some Pixel phone owners were hacked in zero-day attacks”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.