GoKawiilGoogle patches actively exploited Chrome zero-day in V8 engine
Google released Chrome version 152.0.7977.82/.83 to fix a high-severity zero-day flaw, CVE-2026-85046, a type confusion bug in the V8 JavaScript engine that is already being exploited in the wild. The update also patches 11 other vulnerabilities, including use-after-free and out-of-bounds memory issues across several Chrome components.
GoKawiil's interpretation of the reporting above, not reported fact.
Because the flaw sits in V8, attackers could exploit it through a malicious webpage to run code inside Chrome's sandboxed process, putting users at risk simply by visiting a compromised site. This marks the sixth actively exploited Chrome zero-day patched this year, underscoring how frequently browser engines remain prime targets for real-world attacks.
- CVE-2026-85046 is a type confusion bug in Chrome's V8 engine already exploited in the wild.
- The fix arrives in Chrome 152.0.7977.82/.83, alongside patches for 11 other vulnerabilities.
- This is the sixth actively exploited Chrome zero-day Google has fixed so far this year.
Yubico YubiKey 5C NFC Security Key — Browser zero-days are a reminder that your accounts need protection beyond a password. The YubiKey 5C NFC plugs into USB-C or taps against a phone for phishing-resistant hardware two-factor authentication with Google, Microsoft, and other major accounts. It's a pocket-sized backstop while you keep Chrome patched.
See Yubico YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-09-04
Published there as: “Google warns of new Chrome zero-day flaw exploited in attacks”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.