CVE-2026-58704
CISA 기관 조치 기한: 2026-09-19
Google Pixel
Qualys 위협 인텔 · 심각도 5/5 · QID 610807 · Mobile Device
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
KEV 필수 조치: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
타임라인
- NVD 공개
- CISA KEV 등재(실제 악용 확인) 공개 후 1일
- 첫 보도 BleepingComputer · 구글, 픽셀 기기에서 활발히 악용되던 안드로이드 제로데이 취…
- CISA 기관 조치 기한 경과
- 최근 보도 (총 5건) The Hacker News · Pwn2Own 행사에서 세 팀이 모든 패치를 적용한 구글 픽셀 10을 …
벡터: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H