September 2025 CVE Landscape
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
Is It the Beginning of the End For Use-After
60
60
60
60
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
Google patches actively exploited Chrome V8 zero-day CVE-2026-85046 (CVSS 8.8); CISA adds it to KEV with a September 18 deadline.
Google fixed 12 Chrome vulnerabilities, including CVE-2026-85046, a high-severity (CVSS 8.8) type confusion bug in the V8 JavaScript and WebAssembly engine. The flaw, reported by researcher Salvatore Gulizia on August 4, 2026, allows remote arbitrary code execution inside the browser sandbox via a crafted HTML page. Google confirmed the exploit exists in the wild, and CISA added the CVE to its KEV catalog, requiring Federal Civilian Executive Branch agencies to patch by September 18, 2026. This is the sixth actively exploited Chrome zero-day patched in 2026.
88
60
60
60
60
60
60
60
60
60
60
Splunk fixed tens of flaws in Splunk Enterprise and Cloud Platform
60
60
60
60
60
60
60
60
60
IT threat evolution Q2 2022
60