‘Holy Grail’—Google Researchers Found Pixel 10 Zero-Click Exploit Chain

Back in January, the Google hackers known as Project Zero, detailed a zero-click exploit chain for the Pixel 9. Now the same folk, tasked by Google itself to study zero-day vulnerabilities in hardware and software, have disclosed that they were able to write a similar exploit chain for Pixel 10 using what they have labeled the Holy Grail of kernel vulnerabilities. The good news is that the Pixel 10 vulnerability was patched in the February Pixel security bulletin, some 71 days after Project Zero reported it using the Android Vulnerability Rewards Program. Now Project Zero has gone public and told the story of how they did it.

ForbesNew Android 16 VPN Bypass Confirmed—And There’s No Fix From GoogleBy Davey Winder