Google releases a Chrome security update to fix multiple vulnerabilities, including a high-severity zero-day flaw that is being exploited in real-world attacks. Reporting across outlets says the update addresses 12 security issues, with one of them singled out by Google as under active exploitation.
The main focus is a V8 engine bug tracked as CVE-2026-85046. Multiple sources describe it as a type confusion vulnerability in V8 that can be triggered remotely. Bleeping Computer and other outlets note that Google warns users about the zero-day being exploited, while SecurityWeek and Help Net Security detail the scope of the fix and the affected Chrome versions.
Help Net Security and The Hacker News both state that the patch is shipped in Chrome 152.0.7977.82/.83 for Windows and macOS and Chrome 152.0.7977.82 for Linux, with deployment rolling out over days and weeks. SecurityWeek adds that this update represents the sixth Chrome zero-day patched in 2026, reinforcing that the release is part of an ongoing pattern of addressing actively used flaws.
