Hkcert
Critical Vulnerabilities in Google Chrome Expose Users to Remote Code Execution
Article Content
Multiple vulnerabilities have been identified in Google Chrome, with the most severe allowing for arbitrary code execution. CVE-2026-85046 is currently being exploited in the wild, posing an extremely high risk to users. Affected versions include Google Chrome prior to 152.0.7977.82 for Linux and 152.0.7977.82/.83 for Mac and Windows. The vulnerabilities include issues such as improper authorization, use-after-free errors, and buffer overflows, which could lead to denial of service and privilege escalation. Users are advised to update to the latest version immediately to mitigate risks. The vulnerabilities were published on September 1, 2026, with active exploitation confirmed for CVE-2026-85046 on September 3, 2026. The situation remains critical as attackers could gain significant control over affected systems.
Key Points: • CVE-2026-85046 is actively exploited, allowing remote code execution. • Users should update Google Chrome to version 152.0.7977.82 or later immediately. • Multiple vulnerabilities could lead to severe impacts, including privilege escalation and data disclosure.
Ask AI about this cluster
Answers cite the sources they use
Analyzing cluster data...
Referenced clusters
Something went wrong. Please try again.