Google has confirmed that attackers exploited a security flaw in Pixel smartphones to conduct targeted cyberattacks. The vulnerability, tracked as CVE-2026-58704, was located within the device's modem software, which manages internet connectivity.
By exploiting this flaw, attackers were able to bypass the modem's sandbox environment and gain unauthorized access to data on the devices through privilege escalation. The company stated that the vulnerability has already been patched.
The exploit allowed for silent execution without any interaction from the user, meaning victims did not need to click links or open files. Google did not identify the perpetrators, though such methods are often associated with spyware vendors.
