‘Holy Grail’—Google Hackers Discover Pixel 10 Zero-Click Exploit Chain

Google Project Zero disclosed a Pixel 10 zero-click exploit chain built around a severe kernel bug that could enable root-level compromise.

The flaw was reported through the Android Vulnerability Rewards Program and patched in Google’s February Pixel security bulletin.

Project Zero later published technical details, calling the kernel issue the ‘Holy Grail’ of kernel vulnerabilities.

The disclosure highlights both Android’s improved patching process and ongoing security weaknesses in drivers like the VPU and BigWave components.