CVE-2026-85046
CVSS Score
8.8
EPSS Score
1.5%
EPSS Percentile
72th
Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
| CWE | CWE-843 |
| Vendor | |
| Product | chrome |
| Ecosystems | |
| Industries | Technology |
| Published | Sep 3, 2026 |
| Last Updated | Sep 21, 2026 |
⚠️ Actively Exploited — Act Now
Get instant alerts for google chrome
This vulnerability is actively exploited in the wild. Set up free real-time alerts so you're first to know about threats like CVE-2026-85046.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Google / Chrome
152.0.7977.82 < 152.0.7977.82
References
chromereleases.googleblog.com: https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html issues.chromium.org: https://issues.chromium.org/issues/542403045 cisa.gov: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85046 serotav.github.io: https://serotav.github.io/Writeups/v8/when-sorting-leads-to-confusion/ github.com: https://github.com/v8/v8/commit/e0562d87ad9c17042b581582c99237d798572e67 github.com: https://github.com/Serotav/Writeups/blob/77556c57999805fa7815a114da51d91cf24fbea9/v8/When_Sorting_Leads_To_Confusion.md news.ycombinator.com: https://news.ycombinator.com/item?id=49570669