Type confusion in Chrome V8 allows sandbox code execution
Type confusion in Chrome's V8 engine lets remote attackers run arbitrary code inside the browser sandbox via a crafted HTML page. Actively exploited; update to 152.0.7977.82.
- Vendor
- Product
- Chrome (before 152.0.7977.82)
- CVSS
- 8.8
- EPSS (exploit probability)
- 48.9%
- Status
- kev
- CISA patch-by (BOD 22-01)
- Published
Is CVE-2026-85046 being exploited?
Yes. CISA added CVE-2026-85046 to its Known Exploited Vulnerabilities catalog on . CISA only lists a CVE when it has reliable evidence of exploitation in the wild.
FIRST's EPSS model puts the probability of exploitation activity in the next 30 days at 48.9% (scored October 14, 2026).
- CISA KEV[ LISTED ]
- ENISA EUVD (exploited)[ — ]
- CIRCL KEV[ — ]
Catalog snapshot 2026-10-19. Full cross-catalog view: /kev-comparison
What to do
US federal civilian agencies must remediate by (14 days after listing) under BOD 22-01. Everyone else: that deadline is a sensible upper bound, not a target. Vendor guidance and the NVD record are linked under Source above.
Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allows a remote attacker to execute arbitrary code inside the browser sandbox through a crafted HTML page. Google confirmed active exploitation in the wild on September 4, 2026.
Security researcher Salvatore Gulizia (Serotav) reported the flaw on August 4, 2026. Google addressed it in Chrome 152.0.7977.82 for Linux and 152.0.7977.82/.83 for Windows and macOS.
Patch: Update Chrome to 152.0.7977.82 or later. Go to Help > About Google Chrome to trigger the update.
Other Google Chrome CVEs we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV |
|---|---|---|---|---|
| CVE-2026-106382 Use-after-free in Chromecast allows sandbox code executionwrite-up | [ CRITICAL ] | 9.6 | 0.4% | — |
| CVE-2026-106358 Use-after-free in Chrome Navigation allows sandbox code executionwrite-up | [ CRITICAL ] | 9.6 | 0.5% | — |
| CVE-2026-106347 Use-after-free in Chrome Track component allows sandbox code executionwrite-up | [ HIGH ] | 8.8 | 0.4% | — |
| CVE-2026-106197 Use-after-free in Chrome Browser component enables sandbox RCEwrite-up | [ CRITICAL ] | 9.6 | 0.5% | — |
| CVE-2026-15765 Chrome Ozone use-after-freewrite-up | [ HIGH ] | 7.5 | 0.5% | — |
| CVE-2020-16017 Google Chrome Use-After-Free Vulnerability | [ CRITICAL ] | 9.6 | 2.7% |
