Fixing and finding

[Jump to remediation plan](#remediation)

CVE ID

# CVE-2026-85046

Published 2026-09-03

Updated last month

Vendor/s

Google

Product/s

Chromium V8

Version/s

\* > 152.0.7977.82

KEV Status

Active Exploitation

Listed in CISA's Known Exploited Vulnerabilities catalog. Active exploitation observed in the wild.

CVSS Score (v3.1)

8.8

/ 10

High

Severity Details

Base score

8.8 High

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Table of Contents

[Description ](#description)[Why this matters ](#why-this-matters)[CPE ](#cpe)[Related weakness (CWE) ](#cwe)[Remediation plan ](#remediation)[Detection Guidance ](#detection-guidance)[References ](#references)[Sources](#sources)

[Description ](#description)[Why this matters ](#why-this-matters)[CPE ](#cpe)[Related weakness (CWE) ](#cwe)[Remediation plan ](#remediation)[Detection Guidance ](#detection-guidance)[References ](#references)[Sources](#sources)

## Description

CVE-2026-85046 is a high-severity (8.8) type confusion vulnerability in Google Chrome's V8 engine being actively exploited for remote code execution.

## Why this matters

"CVE-2026-85046 is a high-priority security concern because it is actively being exploited in the wild, as evidenced by its inclusion in CISA’s Known Exploited Vulnerabilities (KEV) catalog. With a CVSS score of 8.8, this type confusion vulnerability in the Chromium V8 engine allows remote attackers to execute arbitrary code within the browser's sandbox. Exploitation occurs when a user visits a specially crafted HTML page, making it a significant risk for any organization using Chromium-based browsers. Given the active exploitation status, security teams must prioritize remediation to prevent unauthorized code execution and potential lateral movement within the network."

## CPE

Google

| Product | Version Start | Version End (excl.) | Status     |
| ------- | ------------- | ------------------- | ---------- |
| chrome  | \*            | 152.0.7977.82       | vulnerable |
| v8      | \*            | 15.3.48             | vulnerable |

## Related weakness (CWE)

CWE-843

## Remediation plan

1

### Apply official patches

Immediately update Google Chrome to version 152.0.7977.82 or later. This update includes the necessary fixes for the V8 engine to prevent type confusion exploits.

2

### Update affected systems

Identify and update all Chromium-based browsers and applications across the enterprise that are running versions prior to 152.0.7977.82, ensuring all endpoints are protected.

3

### Restrict access

Utilize web filtering and secure web gateways to block access to known malicious or untrusted websites, reducing the risk of users encountering the crafted HTML pages required for exploitation.

4

### Monitor for exploitation

Deploy endpoint detection and response (EDR) signatures to monitor for unusual browser process behavior, such as unexpected shell execution or memory allocation patterns indicative of a sandbox escape.

## Detection Guidance

"Detection should focus on identifying outdated browser versions through asset inventory and vulnerability scanning. Organizations should monitor endpoint logs for frequent browser crashes or unusual child processes spawned by chrome.exe. Additionally, network security teams should inspect traffic for indicators of compromise (IOCs) related to known exploit kits and monitor for connections to suspicious domains that may host the malicious HTML pages used in this attack."

## References

[https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop\_01882797386.html Release Notes Vendor Advisory ](https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html)[https://issues.chromium.org/issues/542403045 Permissions Required ](https://issues.chromium.org/issues/542403045)[https://github.com/Serotav/Writeups/blob/77556c57999805fa7815a114da51d91cf24fbea9/v8/When\_Sorting\_Leads\_To\_Confusion.md Exploit Third Party Advisory ](https://github.com/Serotav/Writeups/blob/77556c57999805fa7815a114da51d91cf24fbea9/v8/When_Sorting_Leads_To_Confusion.md)[https://github.com/v8/v8/commit/e0562d87ad9c17042b581582c99237d798572e67 Patch ](https://github.com/v8/v8/commit/e0562d87ad9c17042b581582c99237d798572e67)[https://news.ycombinator.com/item?id=49570669 Issue Tracking Third Party Advisory ](https://news.ycombinator.com/item?id=49570669)[https://serotav.github.io/Writeups/v8/when-sorting-leads-to-confusion/ Exploit Third Party Advisory ](https://serotav.github.io/Writeups/v8/when-sorting-leads-to-confusion/)[https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field\_cve=CVE-2026-85046 US Government Resource](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85046)

## Sources

NIST National Vulnerability Database (NVD)

CISA Known Exploited Vulnerabilities (KEV)

Experience superior visibility and a simpler approach to cyber risk management

[Get a demo](https://www.upguard.com/contact-sales)

[Free trial](https://www.upguard.com/demo)