Cybersecurity · VIDEO
Google patches zero-day in Chrome: CVE-2026-85046 active in the wild, update now
Google has released an urgent update for Chrome to fix a zero-day vulnerability actively exploited (CVE-2026-85046) in the V8 engine and 11 other high-severi...
KEY TAKEAWAYS
- CVE-2026-85046 is a confusion-type vulnerability in Chrome's V8 engine, actively exploited in attacks
- The update brings Chrome to version 152.0.7977.82/.83 on Windows/macOS and 152.0.7977.82 on Linux
- The flaw could be exploited through malicious HTML pages with JavaScript to execute remote code
- The update also fixes 9 other high-severity vulnerabilities, including use-after-free and out-of-bounds issues
- It is the sixth zero-day exploited in Chrome in 2026, after CVE-2026-11645, CVE-2026-2441, CVE-2026-3909, CVE-2026-3910, and CVE-2026-5281
