started · updated
Google Pixel updates address exploited modem flaw and Android 17 QPR1
Google has released its September 2026 Pixel security update and the September Pixel Drop, which includes the stable rollout of Android 17 QPR1. The update addresses 110 vulnerabilities across various components, including the bootloader, Bluetooth, and graphics.
A critical focus of this update is the remediation of CVE-2026-58704, a high-severity privilege escalation flaw located in the cellular modem. Google has indicated that this zero-click vulnerability may be under limited, targeted exploitation. The flaw allows an attacker in close proximity to bypass security sandboxes and escalate privileges without any user interaction. In response, CISA has added the vulnerability to its Known Exploited Vulnerabilities catalog and directed federal agencies to apply the patch within three days.
Alongside security fixes, the September Pixel Drop introduces several new features. These include a redesigned Pixel VIPs widget for easier contact access, expanded Scam Detection capabilities for Gboard and Messages in multiple regions and languages, and the expansion of the Pause Point feature to older Pixel models. The update also features Harry Potter-themed customization packs and improvements to Pixel Watch gesture controls.
Entities
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 2 SOURCES] CISA directed federal agencies to patch the Pixel modem vulnerability within three days. www.techrepublic.com · www.logicno.com
- [● 4 SOURCES] CISA added the CVE-2026-58704 vulnerability to its Known Exploited Vulnerabilities catalog. www.intomobile.com · www.techrepublic.com · www.logicno.com · kulturegeek.fr
- [● 3 SOURCES] The September update includes Android 17 QPR1 for Pixel devices. pakistanpost.pk · actusmartphone.fr · borncity.com
- [● 17 SOURCES] The vulnerability CVE-2026-58704 may be under limited, targeted exploitation. pakistanpost.pk · actusmartphone.fr · cybernoz.com · geekyalgeria.com · navabharat.com · +12 more
- [● 13 SOURCES] The modem vulnerability can be exploited without any user interaction. actusmartphone.fr · cybernoz.com · www.informaticien.be · www.logicno.com · winfuture.de · +8 more
- [● 4 SOURCES] The September 2026 Pixel update addresses 110 vulnerabilities. actusmartphone.fr · cybernoz.com · techformator.pl · www.ilsoftware.it
- [● 5 SOURCES] The Pixel Drop includes new Scam Detection features for Gboard and Messages. pakistanpost.pk · geekyalgeria.com · navabharat.com · navbharatlive.com · www.thetechoutlook.com
- [● 14 SOURCES] The CVE-2026-58704 vulnerability is a high-severity privilege escalation flaw located in the cellular modem. actusmartphone.fr · cybernoz.com · www.informaticien.be · www.logicno.com · winfuture.de · +9 more