Google Project Zero Discloses Zero

Cybersecuritynews •Abinaya • May 16, 2026

A newly disclosed zero-click exploit chain targeting Google Pixel 10 devices has raised fresh concerns Android’s low-level security. Google Project Zero researchers demonstrated how attackers could silently compromise a device and escalate privileges to root without any user interaction by chaining just two vulnerabilities. The attack builds on earlier research targeting Pixel 9 devices, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Zero-Click Exploit Chain Discovered for Google Pixel 10 Google's Project Zero disclosed a zero-click exploit chain for the Pixel 10, building on previous research for the Pixel 9. This exploit allows attackers to escalate privileges to root without user interaction by chaining two vulnerabilities, including a critical Dolby decoding bug. The vulnerability was labeled the 'Holy Grail of kernel vulnerabilities' due to its simplicity and potential impact. Fortunately, Google patched this vulnerability in the February 2026 security bulletin, 71 days after it was reported. The exploit can only affect unpatched devices running the December 2025 security patch or earlier. Researchers emphasized the need for improved security practices in Android driver development to prevent such vulnerabilities. 4 sources 71

Extracted Entities

Google Project Zero Discloses Zero

The full story

Extracted Entities

Companies (1)

MITRE ATT&CK (1)

Platforms (1)