Google addressed 2 Chrome zero
60
Google fixes Chrome zero-day with in-the-wild exploit (CVE-2026-5281)
60
60
⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More
Weekly recap: actively exploited Chrome V8 zero-day, MikroTik RouterOS zero-day chain, Magento StyleSmuggler backdoor, and critical N-able N-central flaws.
Google patched an actively exploited Chrome V8 type confusion zero-day, CVE-2026-85046 (CVSS 8.8), the sixth exploited Chrome zero-day of 2026. CERT Polska warned of the MikroTrick exploit chain (CVE-2026-67276 and CVE-2026-86060, CVSS 9.2) giving unauthenticated full control of MikroTik RouterOS devices via SSH, observed since September 2. Sansec disclosed the StyleSmuggler Magento/Adobe Commerce zero-day used since September 4 to inject a Rust backdoor into online stores, while N-able patched three critical N-central flaws (CVE-2026-86206, CVE-2026-86207, and CVE-2026-86218, CVSS 10.0) with Huntress observing likely exploitation. Elastic and Morphisec also detailed RevStealer, an information stealer spread via game cheats and a fake Claude Desktop app.
72
Google fixed second actively exploited Chrome zero
60
60
Google addressed the eighth Chrome zero
60
57
Google fixes eighth actively exploited Chrome zero
60
Google patches actively exploited Chrome zero-day (CVE-2026-85046)
Google patches actively exploited Chrome zero-day CVE-2026-85046, a V8 type confusion bug enabling sandboxed code execution via crafted HTML pages.
Google patched 12 Chrome vulnerabilities, including CVE-2026-85046, a CVSS 8.8 type confusion flaw in the V8 JavaScript and WebAssembly engine exploited in the wild. The bug, reported by researcher Salvatore Gulizia (Serotav) on August 4, 2026, allows arbitrary code execution inside the sandbox via a crafted HTML page; the researcher described it as a V8 compiler bug enabling arbitrary read/write on the JavaScript heap. Fixes shipped in Chrome 152.0.7977.82/.83 for Windows and macOS and 152.0.7977.82 for Linux, and this is the sixth Chrome zero-day Google has fixed in 2026.
85
45
60
60
GOOGLE FIXED THE FIFTH CHROME ZERO
60
45
New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation — Patch Released
60
60
60
60
Google addressed a new actively exploited Chrome zero
60
CISA added 9 new flaws to the Known Exploited Vulnerabilities Catalog
60
New Chrome 0-Day Bug Under Active Attacks
60
Google fixes the fourth Chrome zero-day in 2022
60
60
Russian Hackers Exploit Safari and Chrome Flaws in High
60
60
60
60
60
60
Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild
60
60
Google fixes fifth actively exploited Chrome zero
60
Google addressed the eleventh Chrome zero
60
Google fixes 15th and 16th Chrome zero
60
Google Fixes High-Severity Chrome Flaw Actively Exploited in the Wild
60
60
Google addressed the ninth actively exploited Chrome zero
60
Google fixes a new actively exploited Chrome zero
60
Google addressed the tenth actively exploited Chrome zero
60