Google Issues Emergency Chrome Update for Actively Exploited V8 Zero-Day.
Google Patches Exploited High-Severity V8 Zero-Day Vulnerability in Chrome Google has released an urgent security update for Google Chrome to patch an actively exploited zero-day vulnerability tracked as CVE-2026-85046 . The high-severity bug resides in the browser's V8 JavaScript engine and was initially discovered and reported by security researcher Serotav . Because active exploits exist in the wild, cybersecurity officials recommend that all Chrome users update their installations immediately. Understanding CVE-2026-85046 Type Confusion Vulnerability The underlying flaw involves a critical type confusion error within the execution pipeline of the V8 JavaScript and WebAssembly engine: Exploitation Mechanism: Type confusion vulnerabilities occur when the V8 engine allocates memory for one data object type but processes it as a different type. Attackers can exploit this memory mismatch to trigger browser crashes, execute arbitrary code, or break out of browser sandboxes. Activ...