Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own

Three research teams demonstrated remote exploits against Google Pixel 10 devices at Pwn2Own Ireland—using chains of issues that included collisions and at least one zero-day—earning cash prizes; ZDI will receive the write-ups and vendors have 90 days to patch before full technical details are published. The report also notes widespread exploitation of Samsung Galaxy S26 entries and several other consumer devices during the contest, and references a separate Pixel modem CVE that Google recently patched.