CVE-2026-58704 Google Android
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVSS
- 8.8 High
- EPSS
- 0.6%
- Percentile
- 51
- Published
- 2026-09-15
- Force
- 8 of 12
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
On CISA’s exploited list
Google Pixel Improper Authorization Vulnerability
- Added
- 2026-09-16
- Federal patch deadline
- 2026-09-19
- Ransomware use
- not known