Google Patches Chrome V8 Flaw CVE-2026-85046 Being Actively Exploited

Google confirmed on Thursday that CVE-2026-85046, a high-severity flaw in Chrome's V8 engine, is being actively exploited in the wild. The company released patches in Chrome version 152.0.7977.82 and 152.0.7977.83 for Windows and Mac, and 152.0.7977.82 for Linux, with rollout expected over the coming days and weeks.

The update includes 12 total security fixes, comprising nine high-severity and two medium-severity bugs. Security researcher Salvatore Gulizia reported the type-confusion vulnerability on August 4 and received a $1,000 bug bounty. Google has not disclosed details about attackers, victims, or the exploit's full capabilities and is withholding additional technical information until users install the patches.