Google has released its September 2026 security update for Pixel devices, fixing 110 vulnerabilities, including a high-severity zero-day that the company says may have been exploited in limited, targeted attacks.
Google said all supported Pixel devices will receive the update with the 2026-09-05 security patch level and urged users to install it.
The zero-day, tracked as CVE-2026-58704, affects the Cellular Modem component. Google said the vulnerability involves a permission bypass caused by a logic error in the code. An attacker with basic privileges and access to an adjacent network could exploit the flaw to escalate privileges without requiring any interaction from the victim.
The vulnerability is rated high severity and involves improper authorization and protection mechanism failure. Google has specifically warned that there are indications that CVE-2026-58704 may be under limited, targeted exploitation, making the security update particularly important for supported Pixel users.
Beyond the zero-day, Google’s September Pixel bulletin includes 109 other security fixes. The vulnerabilities cover multiple components of Pixel devices, including the modem, telephony, kernel, bootloader, graphics and other platform components. Google’s bulletin also lists critical remote code execution and privilege escalation flaws among the fixes.
Pixel devices receive a dedicated security bulletin in addition to Google’s regular Android security updates because Google controls the hardware and software used on its Pixel phones. The September update is being rolled out to supported devices in phases, with availability depending on the device and carrier.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
Pixel users can check for the update by opening Settings, going to Security & privacy, selecting System & updates, and then choosing Security update. After downloading and installing the update, users should restart their device if prompted. Google says devices with the 2026-09-05 security patch level or later address the vulnerabilities covered by the September Pixel bulletin.
