CVE-2026-85046

LLM-synthesized narrative grounded in this CVE's description and references.

• Google/Chromellm-fuzzy

  Range: <152.0.7977.82
• Google/V8llm-fuzzy

  Range: <152.0.7977.82
• osv-coords4 versions

  pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0pkg:apk/chainguard/chromiumpkg:apk/wolfi/chromiumpkg:rpm/opensuse/chromium&distro=openSUSE%20Tumbleweed

  < 152.0.7977.82-bp160.1.1+ 3 more

  • (no CPE)range: < 152.0.7977.82-bp160.1.1
  • (no CPE)range: < 152.0.7977.82-r0
  • (no CPE)range: < 152.0.7977.82-r0
  • (no CPE)range: < 152.0.7977.82-1.1

• github.com/v8/v8/commit/e0562d87ad9c17042b581582c99237d798572e67nvdPatch
• github.com/Serotav/Writeups/blob/77556c57999805fa7815a114da51d91cf24fbea9/v8/When_Sorting_Leads_To_Confusion.mdnvdExploitThird Party Advisory
• serotav.github.io/Writeups/v8/when-sorting-leads-to-confusion/nvdExploitThird Party Advisory
• chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.htmlnvdRelease NotesVendor Advisory
• news.ycombinator.com/itemnvdIssue TrackingThird Party Advisory
• issues.chromium.org/issues/542403045nvdPermissions Required
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

• Mind the (Patch) Gap , Part 3: Analysis with Volexity Volcano, Threat Intel, and MCP
  Volexity · Oct 16, 2026
• Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware
  The Hacker News · Sep 23, 2026
• Volexity spots another China-aligned threat group exploiting Chrome and Microsoft defects
  CyberScoop · Sep 22, 2026
• Hackers Clone Legitimate Websites to Silently Trigger Chrome and Windows Zero-Day Exploits
  Cyber Security News · Sep 22, 2026
• Mind the (Patch) Gap, Part 2: Fake Websites Used to Deploy Chrome & Windows 0-Day Exploits
  Volexity · Sep 21, 2026
• Google Pixel phones pwned in zero-click attacks
  The Register Security · Sep 16, 2026
• China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE
  The Hacker News · Sep 15, 2026
• ⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits
  The Hacker News · Sep 14, 2026
• 14th September – Threat Intelligence Report
  Check Point Research · Sep 14, 2026
• Weekly Cybersecurity Newsletter Bulletin – Microsoft 0-day, FortiOS, PAN-OS Flaw, Revolut Data Breach, and 20+ Stories
  Cyber Security News · Sep 14, 2026
• BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days
  SecurityWeek · Sep 12, 2026
• Novel Blue Moon kit targeting Chrome and Windows reflects new reality of AI-driven exploits
  The Register Security · Sep 9, 2026
• Chinese espionage groups swarm to exploit triple-link chain of zero-days
  CyberScoop · Sep 9, 2026
• Mind the (Patch) Gap: Multiple Chinese Threat Actors Chain 0-day Exploits in Chrome & Windows
  Volexity · Sep 9, 2026
• Hackers Chain Chrome and Windows Zero-Days in New BlueMoon Exploit Kit Attacks
  Cyber Security News · Sep 9, 2026
• Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week
  The Hacker News · Sep 9, 2026
• Chrome 153 Patches Seventh Zero-Day of 2026
  SecurityWeek · Sep 9, 2026
• Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox
  The Hacker News · Sep 9, 2026
• Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491)
  Help Net Security · Sep 9, 2026
• Microsoft breaks Patch Tuesday record with 974-CVE deluge
  The Register Security · Sep 9, 2026
• Patch Tuesday - September 2026
  Rapid7 Blog · Sep 8, 2026
• CISA Warns of Chromium Type Confusion 0-Day Vulnerability Actively Exploited in Attacks
  Cyber Security News · Sep 8, 2026
• ⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More
  The Hacker News · Sep 7, 2026
• Weekly Cybersecurity Newsletter Bulletin – CrowdStrike Falcon, Chrome 0-Day, GPT-6 Astra, Dropbox Breach and 20+ Stories
  Cyber Security News · Sep 7, 2026
• Google patches actively exploited Chrome zero-day (CVE-2026-85046)
  Help Net Security · Sep 4, 2026
• Google Patches 6th Chrome Zero-Day of 2026
  SecurityWeek · Sep 4, 2026
• Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
  The Hacker News · Sep 4, 2026
• Critical Chrome 0-Day Vulnerability Actively Exploited in the Wild
  Cyber Security News · Sep 4, 2026
• September 2026 Patch Tuesday forecast: All we need is more time
  Help Net Security · Sep 4, 2026
• Google: CVE-2026-85046 Added to CISA KEV Under Active Exploitation
  Vypr Intelligence · Sep 4, 2026
• Two critical Chrome flaws put users at risk on malicious websites
  Malwarebytes Labs · Sep 2, 2026
• CISA Adds One Known Exploited Vulnerability to Catalog
  CISA Alerts