Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2026-85046: Google Chromium V8 Type Confusion Vulnerability

86
Patch now
HIGH 8.8EXPLOITEDUPGRADEUPGRADE

CVE-2026-85046 is a high-severity flaw (CVSS 8.8) affecting chrome, v8, reported as exploited in the wild. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Why this priority

  • High severity
  • EPSS top 1%: very likely to be exploited
  • Exploited in the wild (CISA KEV)
  • Public exploit reference

A fixed release or distro patch exists.

Risk facts

CVSS score8.8 (High)
Attack vectorNetwork (remote)
Attack complexityLow
Privileges neededNone
User interactionRequired
EPSS exploit chance48.9% (top 1%)
CISA exploited listYes, fix due 2026-09-18
WeaknessCWE-843
Published2026-09-03
Last modified2026-09-21
Publisher (CNA): Chrome · Vendor: google

Am I affected?

Timeline

google chrome UPGRADE
Affected: < 152.0.7977.82
Fixed in: 152.0.7977.82
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy chrome || rpm -q chrome || chrome --version
2. UPGRADE to 152.0.7977.82 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade chrome
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade chrome
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
google v8 UPGRADE
Affected: < 15.3.48
Fixed in: 15.3.48
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy v8 || rpm -q v8 || v8 --version
2. UPGRADE to 15.3.48 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade v8
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade v8
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Exact fixes by distribution

Fedora 46 · retext · FIXED · 8.1.0-1.fc46 · FEDORA-2026-0602a84203 · source
sudo dnf upgrade --advisory=FEDORA-2026-0602a84203
Ubuntu 22.04 · chromium-browser · NOT AFFECTED
Ubuntu 24.04 · chromium-browser · NOT AFFECTED
Debian 12 · chromium · FIXED · 152.0.7977.82-1~deb12u1
sudo apt update && sudo apt install --only-upgrade chromium dpkg --compare-versions "$(dpkg-query -W -f='${Version}' chromium)" ge "152.0.7977.82-1~deb12u1" && echo PATCHED || echo STILL-VULNERABLE
Debian 13 · chromium · FIXED · 152.0.7977.82-1~deb13u1
sudo apt update && sudo apt install --only-upgrade chromium dpkg --compare-versions "$(dpkg-query -W -f='${Version}' chromium)" ge "152.0.7977.82-1~deb13u1" && echo PATCHED || echo STILL-VULNERABLE

Public exploits and detection

Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.

Verify at the official source NVD · CVE Program · CISA KEV catalog · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Related CVEs

References

← Back to latest CVEs