EXPOSURES › CVE-2026-58704
CVE-2026-58704
HIGH ⌖ ON CISA KEV · EXPLOITEDA logic error in Google Pixel cellular modems allows privilege escalation by bypassing authorization checks.
The vulnerability in the cellular modem of Google Pixel devices enables attackers to escalate privileges by bypassing permission checks. DIB organizations must ensure all mobile devices are patched and monitored, as this flaw could lead to unauthorized access to sensitive data or systems. Organizations should verify that their mobile device management policies enforce timely updates and restrict device access to prevent exploitation.
Shame score — A logic error in a cellular modem that allows privilege escalation is a significant security flaw that could be exploited to gain unauthorized access to sensitive data or systems, especially given its presence in a widely used consumer device.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges.
| PRODUCT | STATUS |
|---|---|
| Google Services (Google Cloud Platform Products and underlying Infrastructure) Google |
Authorized |
| Google Workspace Google |
Authorized |