Lest You Find Yourself In A 0-Click Pickle
If you’ve a Pixel in your pocket you had best head to Settings and check for an Android OS update ASAP. There is a 0-day out there that offers one of the worst features possible, a no click infection. Thanks to a logic error in the code present in the cell modem which can lead to a privilege escalation exploit which doesn’t require the owner of the Pixel to do anything. This is one where simply having an unpatched Pixel powered on and connected to the cell network makes you vulnerable to an invisible attack.
Google isn’t giving much in the way of details of the vulnerability which is common with 0-day, 0-click infections. If you’ve patched up to the 2026-09-05 update you are safe and sound … for now. This is in addition to the other Pixel phone vulnerabilities from earlier this month, one affecting Chromium’s V8 JavaScript engine and one is an RCE exploit that goes after an out-of-bounds write vulnerability.
Grab that patch lest you ruin your weekend.
