Skip to content
COOEY

EXPOSURES › CVE-2026-58704

CVE-2026-58704

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2026-09-16 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-58704 ↗
⌖ EXPLOITED IN THE WILD SHAME 65/100 exploited-in-wildprivilege-escalation

A logic error in Google Pixel cellular modems allows privilege escalation by bypassing authorization checks.

The vulnerability in the cellular modem of Google Pixel devices enables attackers to escalate privileges by bypassing permission checks. DIB organizations must ensure all mobile devices are patched and monitored, as this flaw could lead to unauthorized access to sensitive data or systems. Organizations should verify that their mobile device management policies enforce timely updates and restrict device access to prevent exploitation.

Shame score — A logic error in a cellular modem that allows privilege escalation is a significant security flaw that could be exploited to gain unauthorized access to sensitive data or systems, especially given its presence in a widely used consumer device.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges.

AFFECTED FEDRAMP PRODUCTS · 2
PRODUCTSTATUS
Google Services (Google Cloud Platform Products and underlying Infrastructure)
Google
Authorized
Google Workspace
Google
Authorized