Google закрыл 110 уязвимостей в смартфонах Pixel

Google has released its September Pixel Update Bulletin, patching 110 vulnerabilities that are specific to Pixel smartphones' hardware and software, separate from the monthly Android Security Bulletin. The most severe issue, CVE-2026-58704, affects the cellular modem component and lets attackers who already have basic access to the device bypass permission checks to gain elevated privileges, most likely by tricking the phone into connecting to a malicious base station; Google says there are signs this flaw is already being exploited in limited, targeted attacks. Of the remaining 109 vulnerabilities, 46 are rated critical and 62 high severity, including nine remote-code-execution bugs, 88 privilege-escalation issues, ten information-disclosure flaws, and two denial-of-service bugs. Pixel owners are urged to install the update promptly via Settings → Security & Privacy → System & Updates → Security Update → Install.