60
60
CISA Warns of Chromium Type Confusion 0-Day Vulnerability Actively Exploited in Attacks
CISA added the actively exploited Chromium V8 type confusion zero-day CVE-2026-85046 to its KEV catalog, urging patching of Chrome, Edge, and Opera.
CISA added CVE-2026-85046, a V8 type confusion flaw (CWE-843) in Chromium-based browsers, to its Known Exploited Vulnerabilities catalog. A remote attacker can trigger arbitrary code execution inside the browser sandbox via a specially crafted HTML page. Google Chrome is directly affected, and Microsoft Edge, Opera, and other Chromium-based browsers may also be impacted depending on their V8 version. Google has released a Stable channel Chrome update, and CISA directs mitigations under Binding Operational Directive 26-04.
92
60
60
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
Google patches actively exploited Chrome V8 zero-day CVE-2026-85046 (CVSS 8.8); CISA adds it to KEV with a September 18 deadline.
Google fixed 12 Chrome vulnerabilities, including CVE-2026-85046, a high-severity (CVSS 8.8) type confusion bug in the V8 JavaScript and WebAssembly engine. The flaw, reported by researcher Salvatore Gulizia on August 4, 2026, allows remote arbitrary code execution inside the browser sandbox via a crafted HTML page. Google confirmed the exploit exists in the wild, and CISA added the CVE to its KEV catalog, requiring Federal Civilian Executive Branch agencies to patch by September 18, 2026. This is the sixth actively exploited Chrome zero-day patched in 2026.
88
Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild
60
New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation — Patch Released
60
60
60
60
60
Chrome Targeted by Active In-the-Wild Exploit Tied to Undisclosed High
60
Google Issues Security Fix for Actively Exploited Chrome V8 Zero
60
60
60
Google Patches Chrome Zero-Day CVE-2025-10585 as Active V8 Exploit Threatens Millions
60
60
60
Chrome Zero-Day CVE-2025-6554 Under Active Attack — Google Issues Security Update
60
Urgent: Google Releases Critical Chrome Update for CVE-2025
60
60
60
60
60
60
60
60
Google Fixes High-Severity Chrome Flaw Actively Exploited in the Wild
60
Update Chrome Browser Now: 4th Zero
60
60
60
New Chrome Zero-Day Vulnerability CVE-2024
60
Chrome Zero-Day Alert — Update Your Browser to Patch New Vulnerability
60
60
60
Urgent: New Chrome Zero-Day Vulnerability Exploited in the Wild
60
Zero-Day Alert: Google Chrome Under Active Attack, Exploiting New Vulnerability
60
60
60