CVE-2026-85046
Google Chromium V8 Type Confusion Vulnerability
Google Chromium V8Applications & CMS
CVSS
8.8HighExploit odds (EPSS)48.9%Chance of exploitation activity in the next 30 days, higher than 98% of CVEs. Scored 23 Oct 2026FIRST EPSS
CISA required actionApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CISA KEV
What fixes it
- 152.0.7977.82ChromeCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Timeline
Reports 1
1 outlet mention it. Reports are not confirmation; each links to its source.
Description
Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Text from CVE List
Affected versions 1
- Chromeaffected: 152.0.7977.82 before 152.0.7977.82CVE List
References 8
- github.com/v8/v8/commit/e0562d87ad9c17042b581582c99237d798572e67Fixvia CVE List
- chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.htmlReferencevia CVE List
- nvd.nist.gov/vuln/detail/CVE-2026-85046Referencevia CISA KEV
- issues.chromium.org/issues/542403045Referencevia CVE List
- cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85046Referencevia CVE List
- serotav.github.io/Writeups/v8/when-sorting-leads-to-confusion/Referencevia CVE List
- github.com/Serotav/Writeups/blob/77556c57999805fa7815a114da51d91cf24fbea9/v8/When_Sorting_Leads_To_Confusion.mdReferencevia CVE List
- news.ycombinator.com/item?id=49570669Referencevia CVE List