Google has disclosed and patched a high-severity security flaw in the Pixel Cellular Modem, tracked as CVE-2026-58704. The vulnerability carries a CVSS score of 8.0 and is described as a privilege escalation issue. According to the advisory, the root cause is a possible permission bypass within the modem component.
The company has observed signs of limited, targeted exploitation in the wild, which prompted the security update. Successful exploitation could allow an attacker to escalate privileges on the device, potentially gaining deeper access to system functions. Modem-level vulnerabilities are particularly sensitive because the modem operates with low-level privileges and handles critical communication functions.
Users of affected Pixel devices are advised to apply the latest security patch as soon as possible. The disclosure highlights the continued importance of timely firmware updates, especially for vulnerabilities that show evidence of active exploitation.