Google Confirms Zero-Day Vulnerability in Pixel Phones Was Exploited
Google has confirmed that a zero-day vulnerability, tracked as CVE-2026-58704, was exploited in targeted cyberattacks against some users of its Pixel smartphones. The flaw resided in the device's modem software and allowed attackers to bypass security restrictions through privilege escalation. This type of attack is particularly dangerous because it can be executed silently without user interaction—known as a zero-click exploit. The vulnerability has since been patched by Google, but details about who exploited it or how many users were affected remain unclear. Such bugs are often leveraged by surveillance vendors that sell hacking tools to governments and law enforcement agencies. The incident highlights ongoing concerns around mobile device security and the potential for sophisticated cyber threats targeting consumer technology. This revelation may raise awareness among Pixel phone owners regarding software updates, while also prompting scrutiny of how such vulnerabilities are discovered and addressed before they can be widely exploited.
Topics: cyberattack cybersecurity PIXEL Security Spyware zero-click zero-day