Google Chrome Patches Actively Exploited V8 Type Confusion Zero-Day CVE-2026-85046

Google released security updates on September 4, 2026, addressing 12 vulnerabilities in Google Chrome, including one high-severity flaw that is under active exploitation in the wild. The actively tracked vulnerability, CVE-2026-85046, is a type confusion bug in V8, Chrome's JavaScript and WebAssembly engine. According to reports, the bug affects Chrome versions prior to 152.0.7977.82 and could allow a remote attacker to potentially exploit the type confusion bug in V8, leading to arbitrary code execution in the context of the browser.

The update, Chrome version 152.0.7977.82, patches a total of 12 vulnerabilities. While details on the remaining 11 vulnerabilities were not specified in the source advisory, the actively exploited zero-day represents the most critical issue addressed. Google has not disclosed detailed exploitation methods to avoid aiding threat actors, but confirmed that CVE-2026-85046 is being actively exploited in the wild.

Security researchers and organizations should prioritize updating affected installations to the patched version to mitigate the risk of exploitation.