If you get the update on a compatible Pixel device, make sure to install it ASAP.
Google has released a very important security update that patches a zero-day flaw on Pixel handsets that has been actively exploited in what has been called “targeted attacks.” Google released a statement that indicates how serious the vulnerability is. The wholly owned Alphabet subsidiary said, “All supported Google devices will receive an update to the 2026-09-05 patch level. We encourage all customers to accept these updates to their devices.”
Why a zero-day attack is so dangerous
A zero-day attack is a flaw or vulnerability that has been exploited before the developers have had an opportunity to patch it. The flaw in question was assigned the Common Vulnerabilities and Exposures (CVE) number of CVE-2026-58704. This flaw deals with a possible permission bypass due to a logic error in the code.
User interaction is not required for the flaw to be exploited
Google says that exploiting this vulnerability could lead to a “possible permission bypass due to a logic error in the code.” Even more frightening, user interaction is not required for the attacker to exploit the flaw.
The monthly Pixel security update included 110 patches
The vulnerability comes from “improper authorization and protection mechanism failure weaknesses affecting the Modem subcomponent,” according to Bleeping Computer. The Pixel monthly update bulletin includes 110 security issues made up of 12 remote code execution flaws, and 89 privilege escalation vulnerabilities that have been rated
