Actively Exploited Chrome V8 Zero-Day Patched in Stable Release
Active Exploitation · 48 sources · Updated 2mo ago · First seen Sep 4, 2026
Google released Chrome Stable 152.0.7977.82 for Linux and 152.0.7977.82/.83 for Windows and macOS to fix CVE-2026-85046, a high-severity type-confusion zero-day in the V8 JavaScript and WebAssembly engine that is being exploited in the wild. A malicious website can trigger unsafe memory handling and potentially execute attacker-controlled code within Chrome's browser sandbox; an additional vulnerability could be chained to escape that boundary.
The release contains 12 security fixes—10 rated high severity and two medium severity—affecting V8, WebGL, Compositing, Network, DevTools, Skia, and other components. Google has withheld exploit and targeting details while patch adoption increases. Organizations should force an update and relaunch Chrome across managed endpoints, verify deployed versions, and prioritize corresponding updates for Chromium-based browsers such as Edge, Brave, Opera, and Vivaldi when available.
