Google Patches Actively Exploited Chrome V8 Zero-Day CVE-2026-85046
Google released an emergency security update for Chrome on desktop to patch an actively exploited zero-day vulnerability in the V8 JavaScript engine (CVE-2026-85046). The vulnerability allows remote attackers to execute arbitrary code within browser execution sandboxes via crafted HTML pages, posing an immediate threat to autonomous headless web-scraping agents.
Primary sources