Google Fixes Actively Exploited Android Zero-Day on Pixel Devices

{"heading":"The Pixel Device Security Update","subheading":"Details on the CVE-2026-58704 Zero-Day Flaw","paragraph_1":"The Pixel devices received a security update that addresses a high-severity vulnerability, CVE-2026-58704, which was actively exploited in targeted attacks.","paragraph_2":"The security advisory highlights that the vulnerability stems from improper authorization and protection mechanism failures in the Modem subcomponent, allowing attackers to escalate privileges without user interaction.","paragraph_3":"Google has released the September 2026 security patches to address 110 vulnerabilities affecting Pixel devices, including the CVE-2026-58704 flaw. The company encourages all customers to accept these updates to their devices.","paragraph_4":"The Pixel devices receive separate security updates and bug fixes from the standard monthly patches distributed to Android OEMs due to their unique hardware platform and exclusive features. Users must manually apply the security updates by following the steps provided in the security bulletin.","paragraph_5":"Google has also announced an overhaul of its Android and Chrome vulnerability rewards programs, scaling back payouts for easier-to-find AI-powered flaws while offering bounties of up to $1.5 million for some Android exploits."}