Google says some Pixel phone owners were hacked in zero-day attacks

Google confirmed that a zero-day vulnerability in Pixel modem software, tracked as CVE-2026-58704, was exploited in targeted attacks. The flaw allowed privilege escalation from the modem sandbox to the broader device without user interaction. A patch is now available, though Google has not identified the attackers or confirmed specific surveillance vendor involvement.