60
60
60
60
Urgent: Google Releases Critical Chrome Update for CVE-2025
60
Google Issues Security Fix for Actively Exploited Chrome V8 Zero
60
Week in review: Windows kernel flaw patched, suspected Fortinet FortiWeb zero-day exploited
60
60
Chrome Zero-Day CVE-2025-6554 Under Active Attack — Google Issues Security Update
60
Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws
60
60
Update Chrome Browser Now: 4th Zero
60
Google Fixes High-Severity Chrome Flaw Actively Exploited in the Wild
60
New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation — Patch Released
60
60
60
60
60
Google Rushes to Patch Critical Chrome Vulnerability Exploited in the Wild
60
60
Google Patches Chrome Zero-Day CVE-2025-10585 as Active V8 Exploit Threatens Millions
60
60
60
Google Releases Urgent Chrome Update to Fix Actively Exploited Zero
60
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
Google patches actively exploited Chrome V8 zero-day CVE-2026-85046 (CVSS 8.8); CISA adds it to KEV with a September 18 deadline.
Google fixed 12 Chrome vulnerabilities, including CVE-2026-85046, a high-severity (CVSS 8.8) type confusion bug in the V8 JavaScript and WebAssembly engine. The flaw, reported by researcher Salvatore Gulizia on August 4, 2026, allows remote arbitrary code execution inside the browser sandbox via a crafted HTML page. Google confirmed the exploit exists in the wild, and CISA added the CVE to its KEV catalog, requiring Federal Civilian Executive Branch agencies to patch by September 18, 2026. This is the sixth actively exploited Chrome zero-day patched in 2026.
88
Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox
Google patches actively exploited Chrome V8 zero-day CVE-2026-87491, an out-of-bounds write enabling sandboxed code execution via crafted HTML pages.
Google released Chrome 153.0.8010.36/.37 fixing 230 vulnerabilities, including CVE-2026-87491, an out-of-bounds write in the V8 engine that allowed remote code execution inside the sandbox via a crafted HTML page and is confirmed to be exploited in the wild. The flaw was reported on August 6, 2026 by Jihyeon Jeong of Compsec Lab, Seoul National University, who received a $2,500 bug bounty. This is the seventh actively exploited Chrome zero-day of 2026. The update also fixes five critical flaws in WebGL and Cast, plus a high WebPackaging use-after-free (CVE-2026-87639) credited to OpenAI Codex Security.
82
60
60
Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild
60
Chrome Zero-Day Alert — Update Your Browser to Patch New Vulnerability
60
60
60
60
60
60
60
Google fixes 2 new actively exploited zero
60
60
60
CISA Warns of Chromium Type Confusion 0-Day Vulnerability Actively Exploited in Attacks
CISA added the actively exploited Chromium V8 type confusion zero-day CVE-2026-85046 to its KEV catalog, urging patching of Chrome, Edge, and Opera.
CISA added CVE-2026-85046, a V8 type confusion flaw (CWE-843) in Chromium-based browsers, to its Known Exploited Vulnerabilities catalog. A remote attacker can trigger arbitrary code execution inside the browser sandbox via a specially crafted HTML page. Google Chrome is directly affected, and Microsoft Edge, Opera, and other Chromium-based browsers may also be impacted depending on their V8 version. Google has released a Stable channel Chrome update, and CISA directs mitigations under Binding Operational Directive 26-04.
92