Google Cloud threat report

Google patched CVE-2026-85046, an actively exploited zero-day type confusion vulnerability in Chrome's V8 JavaScript engine. The flaw allows remote code execution via crafted HTML pages and has been exploited in the wild. Google released Chrome 152.0.7977.82/.83 (Windows/macOS) and 152.0.7977.82 (Linux) to address this and 11 other vulnerabilities. This is the sixth Chrome zero-day Google fixed in 2026.

• Google warns of new Chrome zero-day flaw exploited in attacks(opens in a new tab)
• Google patches actively exploited Chrome zero-day (CVE-2026-8504(opens in a new tab)
• Critical Chrome 0-Day Vulnerability Actively Exploited in the Wi(opens in a new tab)
• Google patches multiple browser bugs including one that was unde(opens in a new tab)
• Billions Of Chrome Users Urged To Update Now Over $1K 0-Day Flaw(opens in a new tab)
• Google Releases Chrome Update to Patch Actively Exploited V8 Zer(opens in a new tab)