AI Generated Image
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
thehackernews.com • • technology
Key Points:
- Google released security updates fixing 12 vulnerabilities in Chrome, including a high-severity type confusion bug in the V8 JavaScript engine (CVE-2026-85046) actively exploited in the wild.
- The flaw allows remote attackers to execute arbitrary code inside the browser sandbox via a crafted HTML page, with the bug discovered by researcher Salvatore Gulizia, who received a $1,000 bounty.
- Google confirmed the existence of active exploits but withheld attack details to encourage users to update promptly and prevent further exploitation.
- This patch marks the sixth actively exploited Chrome zero-day addressed by Google in 2026, highlighting ongoing security challenges for the browser.
- Users are urged to update Chrome to versions 152.0.7977.82/.83 on Windows, macOS, and Linux; other Chromium-based browser users should also apply updates as they become available.
