Google patched a security vulnerability in Pixel smartphones after discovering the flaw was used in limited, targeted cyberattacks.
The vulnerability, tracked as CVE-2026-58704, affected Pixel phone modem software and was fixed through Google’s September 2026 security update.
Pixel bug enabled silent attacks
The flaw could let attackers bypass the modem’s security protections and gain access to parts of the wider device system through a privilege escalation attack.
The vulnerability could reportedly be exploited through a zero-click attack, meaning users would not need to click a link, open a file, or take any action for an attack to occur.
Security update released
Google included the fix in its September Pixel security bulletin but did not disclose who was behind the attacks or how widely the flaw was used.
Similar advanced smartphone vulnerabilities have previously been associated with spyware operators that sell surveillance tools to governments and law enforcement agencies.
Pixel users should install the latest available security update to receive the patch and protect their devices.
