Google Releases Critical Chrome Security Patch for 6th Zero-Day in 2026

Post Views: 13

Google released Chrome 152 security updates on Thursday to address 12 vulnerabilities, including a zero-day flaw actively exploited in attacks.

Chrome 152 Security Updates Address 12 Vulnerabilities

Zero-Day Flaw CVE-2026-85046

The critical issue, designated CVE-2026-85046, involves a type confusion vulnerability within the V8 JavaScript and WebAssembly engine. The flaw was disclosed by researcher Salvatore Gulizia, who received a $1,000 reward through Google’s bug bounty program. The company confirmed the existence of an associated exploit in the wild but did not provide further technical details.

Type confusion vulnerabilities in V8 engines can enable attackers to execute arbitrary code via malicious HTML pages by manipulating memory structures.

Additional High-Severity Issues

The update addresses nine additional high-severity issues, including out-of-bounds memory access, incomplete resource cleanup, use-after-free conditions, race vulnerabilities, and improper input handling. Three of these were reported by external researchers. Two medium-severity flaws involving input validation and use-after-free scenarios were also resolved.

Broader Security Context

The updates follow broader security releases impacting Chromium-based browsers, alongside fixes for over 300 vulnerabilities in Chrome 152. Other recent cybersecurity developments include patches for critical flaws in Cisco switches, exploitation of a vulnerability in the Cleo Harmony platform, and disruptions to a 23-year-old peer-to-peer botnet. Additionally, threat actors have begun leveraging a newly disclosed Langflow vulnerability, while law enforcement actions targeted a ransomware group linked to a healthcare data breach.

Patch Availability

The Chrome 152 update applies to versions 152.0.7977.82 and 152.0.7977.83 for Windows and macOS, with Linux users receiving version 152.0.7977.82.

Supply Chain Risks and Mitigation

The Chrome 152 release coincides with ongoing efforts to address supply chain risks, such as malicious software distribution via BGP hijacking and compromised WordPress plugins affecting over three million sites. Security advisories highlight the importance of timely patching to mitigate risks from evolving attack techniques.

Conclusion

Google’s Chrome 152 update underscores the critical need for proactive security measures, addressing both zero-day exploits and broader vulnerabilities to safeguard users against emerging threats.