Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation

Google has patched a high-severity security flaw in the Pixel Cellular Modem that has been exploited in the wild. The vulnerability is a privilege escalation flaw with a CVSS score of 8.0. It is caused by a logic error in the code that allows for a permission bypass. The flaw has been assigned the CVE ID CVE-2026-58704. There are signs that the exploitation of this flaw has been limited and targeted. The vulnerability is described in the NIST National Vulnerability Database as a possible permission bypass due to the logic error.