Search: “google chrome”

487 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 731 Vulnerability 649 Exploit / PoC 495 Ransomware 220 Threat actor 154 Phishing & fraud 119 Data breach 111 Industry 103 Policy & legal 59 Research 22 AI tools & infra 22 AI safety & security 15 Advisory 13 AI industry 6

SeverityAll critical 1139 high 656 medium 671 low 214 info 51

Google fixes the sixth actively exploited Chrome zero

Google patched 12 Chrome flaws including actively exploited V8 type confusion zero-day CVE-2026-85046 (CVSS 8.8), enabling sandboxed remote code execution via crafted webpages.

Google released Chrome Stable 152.0.7977.82/.83 for Windows and Mac and 152.0.7977.82 for Linux, fixing 12 vulnerabilities including CVE-2026-85046, a type confusion in V8 with a CVSS score of 8.8. Google says an exploit exists in the wild, making this the sixth actively exploited Chrome zero-day of 2026. The bug affects the JavaScript and WebAssembly engine and allows arbitrary code execution inside the browser sandbox via a specially crafted HTML page. Researcher Salvatore Gulizia (Serotav) reported the flaw on August 4, 2026 and received a $1,000 bounty.

Security AffairsSep 4, 08:24 UTC · 12d agoExploit / PoC in the wildCVE-2026-85046 CVE-2026-2441 CVE-2026-3909+3 CVEs1

Google fixes exploited Chrome sandbox bypass zero-day (CVE-2025-2783)

Help Net SecurityApr 2, 08:45 UTC · Apr 2, 2025Exploit / PoC CVE-2025-2783

Google fixes the seventh actively exploited Chrome zero-day of 2026

Google patched 230 Chrome flaws in version 153.0.8010.36, including actively exploited V8 out-of-bounds write CVE-2026-87491 (CVSS 8.8), the seventh 2026 Chrome zero-day.

Google released Chrome 153.0.8010.36 on Linux and 153.0.8010.36/.37 on Windows and Mac, fixing 230 security vulnerabilities. CVE-2026-87491, an out-of-bounds write in the V8 JavaScript and WebAssembly engine (CVSS 8.8), is being exploited in the wild through specially crafted HTML pages to execute arbitrary code inside Chrome's sandbox. Google says it is the seventh actively exploited Chrome zero-day of 2026, following CVE-2026-2441, CVE-2026-3909, CVE-2026-3910, CVE-2026-5281, CVE-2026-11645, and CVE-2026-85046. Researcher Jihyeon Jeong of Seoul National University reported it on 2026-08-06 and received a $2,500 bounty; Google disclosed no technical details or attribution.

Security AffairsSep 9, 13:47 UTC · 7d agoExploit / PoC in the wildCVE-2026-87491 CVE-2026-2441 CVE-2026-3909+4 CVEs

Google Bug Bounty Program Expands to Chrome V8, Google Cloud

Infosecurity MagazineOct 9, 15:00 UTC · Oct 9, 2023Exploit / PoC

Google fixes Chrome zero-day with in-the-wild exploit (CVE-2024-4671)

Help Net SecurityMay 16, 08:55 UTC · May 16, 2024Exploit / PoC in the wildCVE-2024-4671 CVE-2024-47611

U.S. CISA adds a Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog

Security AffairsNov 19, 21:12 UTC · Nov 19, 2025Exploit / PoC in the wildCVE-2025-13223

Zero-Day Alert: Google Releases Chrome Patch for Exploit Used in Russian Espionage Attacks

The Hacker NewsMar 27, 05:51 UTC · Mar 27, 2025Exploit / PoC in the wildCVE-2025-2783

Google fixes the third actively exploited Chrome 0

Security AffairsMar 15, 08:13 UTC · Mar 15, 2021Exploit / PoC in the wildCVE-2021-21193 CVE-2021-21191 CVE-2021-21192+7 CVEs

New Chrome Zero-Day (CVE-2026-2441) Under Active Attack — Patch Released

The Hacker NewsFeb 15, 00:00 UTC · Feb 15, 2026Exploit / PoC in the wildCVE-2026-2441 CVE-2026-20700

Google Patches Chrome Zero-Day CVE-2025-10585 as Active V8 Exploit Threatens Millions

The Hacker NewsSep 18, 05:49 UTC · Sep 18, 2025Exploit / PoC in the wildCVE-2025-10585 CVE-2025-2783 CVE-2025-4664+3 CVEs

New Chrome 0-day Under Active Attacks

The Hacker NewsOct 21, 16:27 UTC · Oct 21, 2020Exploit / PoC in the wildCVE-2020-15999

Google addressed a new Chrome Zero

Security AffairsNov 29, 19:04 UTC · Nov 29, 2023Exploit / PoC in the wildCVE-2023-6345 CVE-2023-5217 CVE-2023-6348+8 CVEs

Google fixes Chrome zero-day with in-the-wild exploit (CVE-2025-5419)

Help Net SecurityJun 6, 08:50 UTC · Jun 6, 2025Exploit / PoC in the wildCVE-2025-5419

U.S. CISA adds a flaw in Google Dawn to its Known Exploited Vulnerabilities catalog

Security AffairsApr 1, 23:30 UTC · Apr 1, 2026Exploit / PoC in the wildCVE-2026-5281

Google addresses a high severity flaw in V8 engine in Chrome

Security AffairsApr 28, 13:46 UTC · Apr 28, 2021Exploit / PoC CVE-2021-21227 CVE-2020-16040 CVE-2020-15965+6 CVEs

Google Releases Chrome Emergency Fix For Ninth Zero

Infosecurity MagazineDec 5, 16:07 UTC · Dec 5, 2022Exploit / PoC CVE-2022-4262 CVE-2022-4135

Google plugs Chrome zero-day exploited in the wild

Help Net SecurityMar 6, 00:00 UTC · Mar 6, 2019Exploit / PoC in the wildCVE-2019-5786

PDF zero-day samples harvest user data when opened in Chrome

Security AffairsFeb 28, 04:15 UTC · Feb 28, 2019Exploit / PoC

Google Issues Security Fix for Actively Exploited Chrome V8 Zero

The Hacker NewsNov 18, 04:44 UTC · Nov 18, 2025Exploit / PoC in the wildCVE-2025-13223 CVE-2025-2783 CVE-2025-4664+5 CVEs

Google releases Spectre PoC code exploit for Chrome browser

Security AffairsMar 14, 09:52 UTC · Mar 14, 2021Exploit / PoC CVE-2017-5754 CVE-2017-5753 CVE-2017-5715

Google patches Chrome zero-day exploited in the wild (CVE-2026-11645)

Help Net SecurityJun 9, 00:00 UTC · Jun 9, 2026Exploit / PoC in the wildCVE-2026-11645 CVE-2026-2441 CVE-2026-3909+2 CVEs

VMware, Chrome flaws added to Known Exploited Vulnerabilities Catalog

Security AffairsApr 18, 08:13 UTC · Apr 18, 2022Exploit / PoC in the wildCVE-2022-22960 CVE-2022-1364 CVE-2022-24521

Chrome 0-day exploit CVE-2019

Kaspersky SecurelistNov 1, 16:00 UTC · Nov 1, 2019Exploit / PoC CVE-2019-13720

Google addresses two new Chrome zero

Security AffairsNov 12, 08:09 UTC · Nov 12, 2020Exploit / PoC in the wildCVE-2020-16013 CVE-2020-16017 CVE-2020-15999+2 CVEs

Chrome Extension Uses AI Engine to Act Without User Input

Infosecurity MagazineApr 25, 13:15 UTC · Apr 25, 2025Exploit / PoC1

Google fixes fourth actively exploited Chrome zero

Security AffairsApr 1, 20:41 UTC · Apr 1, 2026Exploit / PoC in the wildCVE-2026-5281 CVE-2026-2441 CVE-2026-3909+1 CVEs

New Chrome 0-day Bug Under Active Attacks

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2021Exploit / PoC in the wildCVE-2021-21166 CVE-2021-21148

Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

Google patches actively exploited Chrome V8 zero-day CVE-2026-87491, an out-of-bounds write enabling sandboxed code execution via crafted HTML pages.

Google released Chrome 153.0.8010.36/.37 fixing 230 vulnerabilities, including CVE-2026-87491, an out-of-bounds write in the V8 engine that allowed remote code execution inside the sandbox via a crafted HTML page and is confirmed to be exploited in the wild. The flaw was reported on August 6, 2026 by Jihyeon Jeong of Compsec Lab, Seoul National University, who received a $2,500 bug bounty. This is the seventh actively exploited Chrome zero-day of 2026. The update also fixes five critical flaws in WebGL and Cast, plus a high WebPackaging use-after-free (CVE-2026-87639) credited to OpenAI Codex Security.

The Hacker NewsSep 9, 09:11 UTC · 7d agoExploit / PoC in the wildCVE-2026-87491 CVE-2026-2441 CVE-2026-3909+10 CVEs

Google fixed a new Chrome Zero

Security AffairsAug 17, 17:01 UTC · Aug 17, 2022Exploit / PoC in the wildCVE-2022-2856 CVE-2022-2852 CVE-2022-2854+11 CVEs

VPN leaks users’ IPs via WebRTC. I’ve tested seventy VPN providers and 16 of them leaks users’ IPs via WebRTC (23%)

Security AffairsMar 28, 04:59 UTC · Mar 28, 2018Exploit / PoC

Google Releases Patch for Chrome Vulnerability Exploited in the Wild

Infosecurity MagazineJun 9, 10:15 UTC · Jun 9, 2026Exploit / PoC in the wildCVE-2026-11645

Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491)

Google patched actively exploited Chrome zero-day CVE-2026-87491, a V8 out-of-bounds write enabling sandboxed code execution, in Chrome 153.0.8010.36+.

Google fixed 230 Chrome vulnerabilities including CVE-2026-87491, a Medium-severity out-of-bounds write in the V8 JavaScript and WebAssembly engine that allows remote arbitrary code execution inside the sandbox via a crafted HTML page. Google confirmed an exploit exists in the wild; fixes shipped in Chrome 153.0.8010.36 and .37 for Windows and macOS and 153.0.8010.36 for Linux. The flaw was reported August 6, 2026 by Jihyeon Jeong of Seoul National University's Compsec Lab, earning a $2,500 bounty. It is the seventh actively exploited Chrome zero-day patched in 2026, following CVE-2026-2441, CVE-2026-3909, CVE-2026-3910, CVE-2026-5281, CVE-2026-11645 and CVE-2026-85046.

Help Net SecuritySep 9, 07:53 UTC · 7d agoExploit / PoC in the wildCVE-2026-87491 CVE-2026-2441 CVE-2026-3909+4 CVEs