1. An app called Showcase.apk, designed for Verizon in-store demos, has left multiple generations of Pixel smartphones vulnerable to various attacks since 2017. 2. The app, pre-installed in Pixel firmware, allows potential attackers to execute code or shell commands with system privileges, posing significant security risks. 3. Google is committed to removing the app from all affected devices, but a patch for the vulnerability is yet to be released.