Google has released new security updates for Chrome 152, addressing 12 security vulnerabilities, including a zero-day flaw actively exploited in the wild. This update marks the sixth zero-day vulnerability addressed by Google in 2026.
Details of the Latest Chrome Exploit
The recently patched flaw, identified as CVE-2026-85046, is classified as a high-severity type confusion bug within Chrome’s V8 JavaScript and WebAssembly engine. This vulnerability was uncovered by researcher Salvatore Gulizia, who was awarded a $1,000 bug bounty for his discovery. Type confusion vulnerabilities can lead to severe consequences such as memory corruption, application crashes, and potential remote code execution.
Google has confirmed the existence of exploits targeting CVE-2026-85046, though specific technical details have not been disclosed to prevent further exploitation. These types of vulnerabilities can allow attackers to execute arbitrary code remotely through specially crafted HTML pages, posing significant risks to users.
Comprehensive Security Patches Released
The resolution for this zero-day vulnerability is included in Chrome versions 152.0.7977.82/.83 for Windows and macOS, and version 152.0.7977.82 for Linux. Alongside this critical fix, Google has resolved nine additional high-severity vulnerabilities. These include issues such as out-of-bounds read/write errors, incomplete cleanup processes, use-after-free bugs, race conditions, improper resource exposure, and other type confusion issues.
Three of these high-severity vulnerabilities were reported by external security researchers, emphasizing the collaborative effort in maintaining browser security. Furthermore, the update also patches two medium-severity flaws related to improper input validation and use-after-free conditions.
Ongoing Efforts in Browser Security
This latest update highlights Google’s commitment to addressing security concerns promptly and effectively. The company has been vigilant throughout 2026, with prior patches addressing zero-day vulnerabilities such as CVE-2026-2441, CVE-2026-3909, CVE-2026-3910, CVE-2026-5281, and CVE-2026-11645.
The continuous discovery and remediation of such vulnerabilities are crucial in safeguarding users against potential threats. As cyber threats evolve, regular updates and patches remain vital in ensuring the security and integrity of users’ digital environments.
Related security updates have also been released for other platforms, including Firefox and WordPress, addressing numerous vulnerabilities. These measures underline the ongoing need for vigilance and prompt action in the ever-changing landscape of cybersecurity.
