Google says some Pixel phone owners were hacked in zero-day attacks

Google reported that a vulnerability CVE-2026-58704 in Pixel modems was used in limited targeted cyberattacks. The bug allowed bypassing the modem sandbox and accessing phone data without owner action; a patch has been released.

• Vulnerability CVE-2026-58704 found in Pixel modem
• Zero-click attack requires no user action
• Bug allowed privilege escalation beyond modem sandbox
• Google did not disclose who exploited the vulnerability