cyber.hendryadrian.com
Vulnerability & Exploit · securityweek.com

Google Patches Actively Exploited Chrome V8 Zero-Day

· Original article ↗

Summary

Chrome 152 updates fix 12 vulnerabilities, including actively exploited CVE-2026-85046, a high-severity type confusion flaw in the V8 engine. Google released fixes for Windows, macOS, and Linux.

Key points

  • Google says an exploit for CVE-2026-85046 exists in the wild; it has not shared details about the flaw.
  • The high-severity vulnerability is a type confusion issue in Chrome’s V8 JavaScript and WebAssembly engine.
  • Chrome 152.0.7977.82/.83 for Windows and macOS, and 152.0.7977.82 for Linux, include the fix.
  • The update addresses 11 additional vulnerabilities: nine high-severity bugs and two medium-severity weaknesses.
  • CVE-2026-85046 is the sixth Chrome zero-day patched in 2026, according to the article.

Article Details

Vulnerability Types
  • Type confusion
Severity
High
Exploitation Status
active
Exploit Availability
unknown
Patch Status
available

CVE

CVE-2026-85046Tracked as CVE-2026-85046, the high-severity bug is described as a type confusion issue in Chrome’s V8 JavaScript and WebAssembly engine.

People

Salvatore GuliziaReported CVE-2026-85046 and received a $1,000 bug bounty reward.

Vendors

GoogleGoogle on Thursday rolled out fresh Chrome 152 security updates that resolve 12 vulnerabilities, including an exploited zero-day.

Products

Google ChromeGoogle on Thursday rolled out fresh Chrome 152 security updates that resolve 12 vulnerabilities, including an exploited zero-day.V8Tracked as CVE-2026-85046, the high-severity bug is described as a type confusion issue in Chrome’s V8 JavaScript and WebAssembly engine.

Related Articles