Google Fixes High-Severity Chrome Vulnerability Exploited in the Wild
- Google has patched a high-severity vulnerability CVE-2026-85046 in Chrome that was actively exploited by attackers.
- The vulnerability exists in the V8 engine responsible for running JavaScript and WebAssembly code.
- Google confirmed active exploitation but did not disclose details about the attackers, targets, or exploitation methods.
- The fix is included in Chrome version 152.0.7977.82/83 and will be rolled out over the coming days or weeks.
- Security researcher Salvatore Gulizia reported the vulnerability on August 4th and received a $1,000 bug bounty.
- This update addresses 12 security issues total, including 9 high-severity and 2 medium-severity vulnerabilities.
Google has released a security patch for a high-severity vulnerability (CVE-2026-85046) in its Chrome browser that has been actively exploited by attackers in the wild. The vulnerability is located in the V8 engine, which powers JavaScript and WebAssembly execution within the browser.
The company confirmed that the vulnerability has been exploited but provided no details regarding the identity of attackers, their targets, or the specific exploitation techniques used. The fix has been incorporated into Chrome version 152.0.7977.82/83 and will be distributed to users over the coming days or weeks.
Security researcher Salvatore Gulizia discovered and reported the vulnerability on August 4th, earning a $1,000 bug bounty from Google. This latest update addresses a total of 12 security issues, with 9 classified as high-severity and 2 as medium-severity vulnerabilities.
谷歌修复Chrome浏览器高危漏洞 已被黑客利用
谷歌已发布针对Chrome浏览器高危漏洞（CVE-2026-85046）的安全补丁，该漏洞已被攻击者主动利用。该漏洞位于负责浏览器内JavaScript和WebAssembly执行的V8引擎中。
谷歌确认该漏洞已被利用，但未提供关于攻击者身份、目标或具体利用技术的任何信息。修复已纳入Chrome版本152.0.7977.82/83，将在未来数天或数周内向用户分发。
安全研究员Salvatore Gulizia于8月4日发现并报告了该漏洞，获得谷歌1000美元的漏洞赏金。本次更新共修复12个安全问题，其中9个被列为高危漏洞，2个为中危漏洞。