CVE-2026-58704: Google Pixel Improper Authorization Vulnerability
Summary
A critical improper authorization vulnerability has been identified in the cellular modem of Google Pixel devices. This flaw allows attackers to bypass permission checks and escalate privileges. CISA has issued guidance for stakeholders to apply mitigations following vendor instructions and adhere to risk-based security update prioritization.
IFF Assessment
This vulnerability allows for privilege escalation, which is a significant threat to the confidentiality, integrity, and availability of user data and device functions.
Severity
CISA KEV: Listed as actively exploited. Federal patch due: September 19, 2026. Known ransomware use: Unknown.
Defender Context
This vulnerability highlights the ongoing risks associated with cellular modem security in mobile devices. Defenders should prioritize applying vendor-provided patches promptly and monitor for any exploit attempts. It also underscores the importance of CISA's guidance on risk-based patching, especially for critical infrastructure.