Google Chrome

Mentions · 7d0
Mentions · 30d0
All mentions5
First seenAug 28, 2026
Last mentionedSep 22, 2026

Timeline

5 articles · newest first

Hackers Clone Legitimate Websites to Silently Trigger Chrome and Windows Zero-Day Exploits

A cyber campaign uses cloned legitimate websites to trigger zero-day exploits in Chrome and Windows, targeting Asian government entities for espionage.

Cyber Security NewsSep 22, 11:25 UTC · Sep 22, 2026OtherExploited2 · 1 read

Attackers are weaponizing the gap between Chromium fixes and Chrome patches

Espionage actors use the BlueMoon exploit kit to chain Chrome V8 and Windows kernel zero-days via spear phishing, gaining full admin on unpatched endpoints.

CSO OnlineSep 11, 01:10 UTC · Sep 11, 2026Exploit / PoCExploitedCVE-2026-85046 CVE-2026-87491 CVE-2026-858804

U.S. CISA adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog

CISA added actively exploited Chrome V8 type-confusion flaw CVE-2026-85046 (CVSS 8.8) to its KEV catalog; Google patched it in Chrome 152.

Security AffairsSep 4, 22:50 UTC · Sep 4, 2026Exploit / PoCExploitedCVE-2026-85046 CVE-2026-2441 CVE-2026-3909+37 · 4 reads

Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day

Google patches actively exploited Chrome V8 zero-day CVE-2026-85046 (CVSS 8.8); CISA adds it to KEV with a September 18 deadline.

The Hacker NewsSep 4, 07:18 UTC · Sep 4, 2026Exploit / PoCExploitedCVE-2026-85046 CVE-2026-2441 CVE-2026-3909+32 · 1 read

Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers

Google announced Android 17 will enforce OS-wide Encrypted Client Hello with ECH GREASE, plus Certificate Transparency by default and carrier 2G disablement.

The Hacker NewsAug 28, 16:20 UTC · Aug 28, 2026Advisory1 · 1 read

Related CVEs

by mentions

CVE-2026-850462%8.8
Actively Exploited V8 Type Confusion in Google Chrome (CVE-2026-85046)
published Sep 3, 2026Google ChromeKEVPoC ×6
CVE-2026-39103%8.8
Out-of-Bounds Memory Flaw in Google Chrome V8 Allows Sandboxed Code Execution
published Mar 13, 2026google chromeKEV
CVE-2026-116452%8.8
Out-of-Bounds Read/Write in Google Chrome V8 Enables In-Sandbox Code Execution
published Jun 9, 2026Google ChromeKEVPoC
CVE-2026-244154%8.8
Use-After-Free in Google Chromium CSS Rendering Exposes Chrome, Edge, Opera Users
published Feb 13, 2026Google ChromiumKEVPoC
CVE-2026-39092%8.8
Out-of-Bounds Write in Google Chrome's Skia Rendering Engine
published Mar 13, 2026Google Chrome (Skia rendering engine)KEV
CVE-2026-528114%8.8
Use-After-Free in Google Chrome's Dawn (WebGPU) Component Enables Arbitrary Code Execution
published Apr 1, 2026Google ChromeKEV
CVE-2026-874914%8.8
Actively Exploited Out-of-Bounds Write in Google Chrome V8
published Sep 9, 2026Google Chrome (V8 JavaScript engine; tracked by CISA as 'Google Chromium V8')KEV
CVE-2026-85880<1%7.8
Heap-Based Buffer Overflow in Windows ALPC Enables Local Privilege Escalation
published Sep 8, 2026Microsoft Windows 10KEV

Appears with

Googlevendor · 3
Chromeproduct · 2
Google Chromeproduct · 2
Microsoft Windowsvendor · 2
CISAorganization · 2
Volexityvendor · 2
Googleorganization · 2
China Digital Timesorganization · 1
Jigsawvendor · 1
V8product · 1
Windowsproduct · 1
Androidvendor · 1
mining companiesvictim · 1
US NGOsvictim · 1
Chromiumvendor · 1
Android 17product · 1

Entities are extracted by the model from each article. First seen Aug 28, 2026, last mentioned Sep 22, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.