Google security advisory (AV26-883) – Update 1
Google patched actively exploited Chrome flaw CVE-2026-85046 in Chrome 152.0.7977.82; CISA added it to the KEV catalog, urging updates.
The Canadian Centre for Cyber Security (advisory AV26-883, Update 1) reports Google fixed CVE-2026-85046 in Chrome 152.0.7977.82 and that an exploit exists in the wild. CISA added the vulnerability to its Known Exploited Vulnerabilities database on September 4, 2026. Users and administrators should update Chrome stable desktop channels promptly.
- CVE-2026-85046 affects Chrome prior to 152.0.7977.82
- CISA added the flaw to the KEV database on September 4, 2026
- Advisory AV26-883 urges immediate patching of desktop Chrome
- CVEs
- CVE-2026-85046
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-85046 | Actively Exploited V8 Type Confusion in Google Chrome (CVE-2026-85046) | 8.8 | 2% | KEVPoC ×6 | KEV |
From the original article
1 min read at cyber.gc.ca
Serial Number: AV26-883 Date: September 4, 2026 As of September 3, 2026, Google is affected by vulnerabilities in the following product: Chrome Prior to 152. 0. 7977.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.