CVE-2026-58704
2026-09-15
18h34 +00:00
18h34 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE 資訊
CISA KEV（已知被利用漏洞）
漏洞名稱 : Google Pixel Improper Authorization Vulnerability
必要行動 : Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
已知用於勒索軟體活動 : Unknown
新增日期 : 2026-09-16 00h00 +00:00
行動截止日期 : 2026-09-19 00h00 +00:00
重要資訊
根據已知被利用漏洞目錄（CISA KEV），此 CVE 已被識別為存在漏洞且構成主動威脅。CISA 已將此漏洞列為網路犯罪者正在積極利用的目標，強調立即採取行動修補此缺陷的重要性。必須優先更新和修復此 CVE，以保護系統免受潛在網路攻擊。
