{"id":"CVE-2026-85046","kind":"vulnerability","aliases":["CVE-2026-85046"],"related":[],"title":"Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code…","description":"Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.\n\nCISA required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","summary":"Google Chromium's V8 JavaScript engine has a type confusion bug that lets a remote attacker run arbitrary code inside the browser sandbox by luring a user to a crafted HTML page. The bug is listed as actively exploited in the wild, and it also reaches other Chromium browsers such as Edge and Opera.","severity":"high","cvss":8.8,"epss":null,"exploited":true,"exploited_at":"2026-09-04T00:00:00+00:00","products":[{"name":"Google Chromium V8","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"google chrome","fixed":["152.0.7977.82"],"affected":"< 152.0.7977.82","ecosystem":"vendor"},{"name":"google v8","fixed":["15.3.48"],"affected":"< 15.3.48","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["browsers","chrome","chromium","edge","endpoints","exploited","opera","vendor"],"not_affected_if":["non-chromium-browsers"],"how_to_check":"Open the browser's about page (chrome://version or edge://version) and compare the version with the fixed release in the vendor advisory; the sources do not give a fixed version.","fix":"Update Google Chrome, Microsoft Edge, Opera and other Chromium-based browsers to the latest stable release that includes the vendor fix; the sources do not name the fixed version.\nFollow CISA BOD 26-04 guidance and the vendor mitigation instructions.","status":"open","published_at":"2026-09-03T20:17:24+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:31:40+00:00","updated_at":"2026-10-23T23:44:52+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-23T20:31:40Z","model":"claude-haiku-5-5","output":{"fix":"Update Google Chrome, Microsoft Edge, Opera and other Chromium-based browsers to the latest stable release that includes the vendor fix; the sources do not name the fixed version.\nFollow CISA BOD 26-04 guidance and the vendor mitigation instructions.","summary":"Google Chromium's V8 JavaScript engine has a type confusion bug that lets a remote attacker run arbitrary code inside the browser sandbox by luring a user to a crafted HTML page. The bug is listed as actively exploited in the wild, and it also reaches other Chromium browsers such as Edge and Opera.","category":"vendor","who_cares":["chrome","edge","opera","chromium","browsers","endpoints"],"confidence":0.6,"analyst_note":"Find the fixed Chrome/Chromium version and vendor advisory for CVE-2026-85046 via the Chrome Releases blog or the CISA KEV entry, and confirm the affected version range.","how_to_check":"Open the browser's about page (chrome://version or edge://version) and compare the version with the fixed release in the vendor advisory; the sources do not give a fixed version.\nunknown","needs_analyst":true,"not_affected_if":["non-chromium-browsers"],"severity_if_unknown":"high"},"cost_usd":0.000445,"input_tokens":2249,"output_tokens":441,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-04':157C,183C,214C '-2026':20A,23A '-85046':21A,24A '152.0.7977.82':10A '26':156C,182C,213C 'accord':146C 'action':142C 'activ':77B 'adher':210C 'affect':122C 'allow':11A,103C 'also':84B 'appli':143C 'applic':180C 'arbitrari':17A,57B,109C 'asset':204C 'attack':14A,55B,106C 'base':161C 'bod':155C,181C,212C 'browser':32B,61B,88B,125C 'bug':50B,73B 'chrome':7A,29A,33B,135C 'chromium':26A,34B,41B,87B,95C,128C 'cisa':140C,153C,170C 'cloud':186C 'code':18A,58B,110C 'complianc':151C 'confus':2A,49B,100C 'contain':97C 'could':121C 'craft':69B,116C 'cve':19A,22A 'discontinu':189C 'edg':35B,91B,137C 'endpoint':36B 'engin':45B 'ensur':150C,209C 'evalu':202C 'execut':16A,108C 'exploit':37B,78B 'exposur':207C 'follow':179C 'forens':172C 'googl':6A,40B,94C,134C 'google':25A,28A,30A 'guidanc':168C,184C 'guidelin':216C 'html':70B,117C 'includ':129C 'insid':59B,111C 'instruct':149C 'internet':206C 'javascript':44B 'let':52B 'limit':132C 'list':75B 'lure':64B 'microsoft':136C 'mitig':144C,195C 'multipl':123C 'note':167C,178C 'opera':38B,93B,139C 'page':71B,118C 'patch':215C 'prior':8A 'priorit':158C 'product':193C 'reach':85B 'remot':13A,54B,105C 'requir':141C,174C 'respons':200C 'risk':163C 'run':56B 'sandbox':62B,113C 'secur':159C 'see':164C,175C 'servic':187C 'stakehold':198C 'triag':173C 'type':1A,48B,99C 'unavail':197C 'updat':160C 'url':165C,176C 'use':190C 'user':66B 'util':127C 'v8':4A,27A,31A,43B,96C 'vendor':39B,148C 'via':114C 'vulner':101C,120C 'web':124C 'wild':81B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2026-09-03T20:17:24+00:00","kev":{"dateAdded":"2026-09-04","dueDate":"2026-09-18","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2026-85046","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-85046","severity":null,"published_at":"2026-09-04T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T13:39:28+00:00","note":null},{"source":"nvd","external_id":"CVE-2026-85046","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85046","severity":null,"published_at":"2026-09-03T20:17:24+00:00","modified_at":"2026-09-21T13:17:10+00:00","first_seen_at":"2026-10-23T23:44:52+00:00","fetched_at":"2026-10-23T23:44:52+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}