⚡️ 0-Day Alert: Chrome v8 RCE

Update Chrome to 152.0.7977.82/.83

Share

Exploited in the wild: CVE-2026-85046 – v8 array-builtin callback side-effect to elements-kind transition confusion. Affects both Turbofan and Maglev.

The bug can be exploited in default configuration. It requires multiple other bugs to achieve arbitrary code execution on the system, which raises the bar for attackers to take advantage of it.

Patched in Chrome 152.0.7977.82/.83