Google on Thursday released a security update for Chrome that patches 12 vulnerabilities, including a high-severity flaw actively exploited in the wild. The update addresses CVE-2026-85046, a type confusion bug in the V8 JavaScript engine with a CVSS score of 8.8. Google confirmed the vulnerability was being used in targeted attacks before the patch was made available. Users are urged to update immediately to mitigate risk.
The CVE-2026-85046 vulnerability stems from improper handling of object types during JavaScript execution in Chrome’s V8 engine. This type confusion error could allow attackers to execute arbitrary code by tricking the browser into misinterpreting data structures. Exploitation requires victims to visit a malicious website, making drive-by attacks a primary concern. Google’s Threat Analysis Group detected the exploit in limited, targeted campaigns prior to disclosure. The fix involves stricter type checking in V8’s compiler pipeline to prevent unsafe optimizations.
Chrome version 118.0.5993.90 for desktop and 118.0.5993.90 for Android includes the patches. Google rolled out the update through its standard release channel, with automatic updates enabled by default for most users. Enterprise administrators can deploy the fix via centralized management tools. The company noted that no additional user action is required beyond ensuring Chrome is up to date. Other vulnerabilities patched in the same release include issues in Blink, GPU processing, and sandbox escape mechanisms.
What is CVE-2026-85046 and why is it serious? CVE-2026-85046 is a type confusion vulnerability in Chrome’s V8 JavaScript engine that allows remote code execution. Its CVSS score of 8.8 reflects high impact due to potential for full system compromise via malicious websites.
Who is at risk from this exploit? Anyone using an unpatched version of Chrome is potentially at risk, particularly if they visit compromised or malicious sites. Targeted attacks suggest certain users may have been specifically selected, though broad exploitation remains possible.
How can I confirm my Chrome is updated? Users can check Chrome’s version by navigating to Settings > About Chrome. The browser will automatically check for and install updates if available. A version number of 118.0.5993.90 or higher indicates protection.