CVE-2026-85046: Chrome vulnerability

Overview Sources History

What happened

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected versions

Chrome: 152.0.7977.82 through before 152.0.7977.82 (custom) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

Apply vendor-provided updates or mitigations.
Review affected product exposure and access logs.

Public PoC references

RepositoryAuthorFirst seenReference

atiilla/CVE-2026-85046CVE-2026-85046 | Chrome V8 Type Confusion in Inline Array.prototype.sort (Maglev/Turbofan) | CVSS 8.8 | CWE-843 | Chrome < 152.0.7977.82★ 0atiilla2026-09-08Verified SneakyNachos/CVE-2026-85046-who-put-the-silverback-guerilla-in-the-wasm★ 1SneakyNachos2026-09-08Verified Eliot-code/CVE-2026-85046★ 0Eliot-code2026-09-07Candidate adriyansyah-mf/cve-2026-85046-poc★ 4adriyansyah-mf2026-09-05Verified ubitquity/CVE-2026-85046-Patch-confusion-zero-day-vulnerability-in-Google-Chrome-s-V8-engineConceptual C++ patch and structural analysis for CVE-2026-85046, a critical type confusion zero-day vulnerability in Google Chrome's V8 engine★ 0ubitquity2026-09-04Verified HORKimhab/CVE-2026-85046CVE-2026-85046★ 1HORKimhab2026-09-04Verified SploitusOut-of-bounds write exploit in Chrome escaping renderer to launch Evolution mail handler.SneakyNachos2026-09-12T17:35:58Verified SneakyNachos/CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.Out-of-bounds write exploit in Chrome escaping renderer to launch Evolution mail handler.SneakyNachos2026-09-12T17:35:58Verified

Corrections Report an issue

Chrome vulnerability