Google fixes a Pixel modem flaw exploited in targeted attacks
Google patched a privilege-escalation flaw in the Pixel modem in its September update and reported signs of limited, targeted exploitation.
What happened
Google fixed a privilege-escalation vulnerability in the Pixel modem (CVE-2026-58704) in its September 2026 update, according to 9to5Google. The company reported signs of limited, targeted exploitation with no user interaction, and CISA added it to its catalogue of exploited vulnerabilities that same month. The advisory covers Pixel devices, not all of Android.
Why it matters
A modem flaw is exploited over the mobile network, without the person installing anything or opening a link. That makes it especially relevant for the phones of executives and exposed profiles.
What we recommend
Install the September update on every corporate Pixel; check compliance from mobile device management; and, for executives and sensitive profiles, strengthen phone protection.
Related service: Executive digital protection
Want to know how it affects you?
We review your environment and tell you what to prioritise, with no commitment.