Google Fixes Chrome Zero-Day Vulnerability (CVE-2026-85046)

Post Views: 6

Google released a critical update for its Chrome browser to resolve 12 security vulnerabilities, one of which is a zero-day flaw (CVE-2026-85046) that has been observed in active cyberattacks.

Critical Update for Chrome Browser

Google confirmed in a security advisory issued on Thursday that an exploit for the vulnerability CVE-2026-85046 is currently being used in real-world scenarios. The patch is now available in Chrome versions 152.0.7977.82 and 152.0.7977.83 for Windows and macOS, with the Linux edition receiving the 152.0.7977.82 update. These updates will be distributed to users gradually over the next several days and weeks.

Details of the Zero-Day Vulnerability

The vulnerability CVE-2026-85046, rated with a CVSS score of 8.8, stems from a type confusion issue within the V8 JavaScript and WebAssembly engine. This flaw enables a remote attacker to execute arbitrary code within the browser’s sandbox environment by leveraging a specially crafted HTML page.

Researcher and Bug Bounty

The vulnerability was reported by researcher Salvatore Gulizia, who operates under the alias Serotav, on August 4, 2026. Gulizia received a $1,000 reward through Google’s bug bounty program for identifying the flaw.

Technical Analysis of the Flaw

In a detailed analysis, he outlined the underlying cause as a V8 compiler error that causes an array designated with PACKED_ELEMENTS to be incorrectly assigned the PACKED_SMI_ELEMENTS map. This misclassification allows unauthorized read and write operations on the JavaScript heap.

Google has not disclosed further specifics about the exploitation of this zero-day in the wild or details about the methods used by attackers.

Zero-Day Trends in 2026

CVE-2026-85046 marks the sixth zero-day vulnerability resolved in Chrome during 2026. Earlier patched flaws in the same year include CVE-2026-2441, CVE-2026-3909, CVE-2026-3910, CVE-2026-5281, and CVE-2026-11645. The company’s security advisory did not provide additional context about the scope or impact of the active exploitation.