60
60
New Chrome 0-Day Bug Under Active Attacks
60
Update Your Chrome Browser to Patch New Zero‑Day Bug Exploited in the Wild
60
Microsoft Defender vulnerabilities exploited in the wild (CVE-2026-41091, CVE-2026-45498)
60
60
Google addressed 2 Chrome zero
60
60
Google issued emergency fixes to fix actively exploited Chrome-zero
60
60
60
Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler Bugs
60
60
IT threat evolution Q2 2022
60
Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox
Google patches actively exploited Chrome V8 zero-day CVE-2026-87491, an out-of-bounds write enabling sandboxed code execution via crafted HTML pages.
Google released Chrome 153.0.8010.36/.37 fixing 230 vulnerabilities, including CVE-2026-87491, an out-of-bounds write in the V8 engine that allowed remote code execution inside the sandbox via a crafted HTML page and is confirmed to be exploited in the wild. The flaw was reported on August 6, 2026 by Jihyeon Jeong of Compsec Lab, Seoul National University, who received a $2,500 bug bounty. This is the seventh actively exploited Chrome zero-day of 2026. The update also fixes five critical flaws in WebGL and Cast, plus a high WebPackaging use-after-free (CVE-2026-87639) credited to OpenAI Codex Security.
82
Two critical Chrome flaws put users at risk on malicious websites
Google patched 26 Chrome flaws, including two critical use-after-frees and an actively exploited V8 sandbox escape (CVE-2026-85046); update to 152.0.7977.82/.83.
Chrome's desktop update fixes 26 security issues, including critical use-after-free flaws CVE-2026-84353 in Shared Tab Groups and CVE-2026-84352 in WebGL, both allowing code execution outside the browser sandbox via crafted HTML pages. Google subsequently patched CVE-2026-85046, a high-severity V8 JavaScript engine flaw with exploits already in the wild that enables arbitrary code execution inside the Chrome sandbox; HKCERT rates the overall risk as extremely high. Fixed versions are 152.0.7977.82/.83 on Windows and Mac and 152.0.7977.82 on Linux.
85
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
Google patches actively exploited Chrome V8 zero-day CVE-2026-85046 (CVSS 8.8); CISA adds it to KEV with a September 18 deadline.
Google fixed 12 Chrome vulnerabilities, including CVE-2026-85046, a high-severity (CVSS 8.8) type confusion bug in the V8 JavaScript and WebAssembly engine. The flaw, reported by researcher Salvatore Gulizia on August 4, 2026, allows remote arbitrary code execution inside the browser sandbox via a crafted HTML page. Google confirmed the exploit exists in the wild, and CISA added the CVE to its KEV catalog, requiring Federal Civilian Executive Branch agencies to patch by September 18, 2026. This is the sixth actively exploited Chrome zero-day patched in 2026.
88
Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild
60
New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation — Patch Released
60
60
60
Chrome Targeted by Active In-the-Wild Exploit Tied to Undisclosed High
60
Google Patches Chrome Zero-Day CVE-2025-10585 as Active V8 Exploit Threatens Millions
60
Urgent: Google Releases Critical Chrome Update for CVE-2025
60
Microsoft Fixes 63 Security Flaws, Including a Windows Kernel Zero
60
New Chrome Zero-Day Under Active Attacks
60
60
Google Issues Security Fix for Actively Exploited Chrome V8 Zero
60
60
60
60
60
Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday
60
Trend Micro flaw actively exploited in the wild
60
60
60
60
60
60
September 2018 Patch Tuesday: Microsoft fixes actively exploited zero-day
60