✕

Rewterz Annual Threat Intelligence Report 2025 - Download Now

Request a Demo
Rewterz

Microsoft Teams Abuse Leading to Enterprise Compromise – Active IOCs

September 3, 2026
Rewterz

SideWinder APT Group aka Rattlesnake Targeting Pakistan – Active IOCs

September 6, 2026

Google Fixes Actively Exploited Chrome Zero-Day Enabling RCE

Severity

High

Analysis Summary

Google has released a security update for Chrome addressing 12 vulnerabilities, including a high-severity flaw that is being actively exploited in the wild. The vulnerability, tracked as CVE-2026-85046 with a CVSS score of 8.8, is a type confusion vulnerability in V8, Chrome’s JavaScript and WebAssembly engine.

The flaw allows a remote attacker to achieve arbitrary code execution within the Chrome sandbox by tricking a victim into accessing a specially crafted HTML page. Security researcher discovered and responsibly disclosed the vulnerability to Google on August 4, 2026, receiving a $1,000 bug bounty.

According to the researcher’s technical analysis, the vulnerability originates from incorrect handling of JavaScript array types by V8’s compiler. Under specific conditions, this confusion can be leveraged to achieve arbitrary read/write capabilities on the JavaScript heap, potentially enabling further exploitation and code execution.

Google has confirmed that an exploit for CVE-2026-85046 exists in the wild, although it has withheld technical details regarding the observed attacks to allow users sufficient time to apply the security update and reduce further exploitation.

This vulnerability represents the sixth actively exploited Chrome zero-day addressed by Google in 2026, following CVE-2026-2441, CVE-2026-3909, CVE-2026-3910, CVE-2026-5281, and CVE-2026-11645.

Users are advised to immediately update Google Chrome to version 152.0.7977.82/.83 on Windows and macOS, and 152.0.7977.82 on Linux. Updates can be installed through More → Help → About Google Chrome → Relaunch.

Organizations should also monitor and update other Chromium-based browsers, including Microsoft Edge, Brave, Opera, and Vivaldi, as corresponding security fixes become available.

Impact

  • Arbitrary Code Execution

Indicators of Compromise

CVE

  • CVE-2026-85046

Remediation

  • Update Google Chrome immediately to version 152.0.7977.82/.83 on Windows/macOS or 152.0.7977.82 on Linux.
  • Update Chromium-based browsers such as Microsoft Edge, Brave, Opera, and Vivaldi when security patches become available.
  • Enable automatic browser updates to ensure security patches are applied promptly.
  • Prioritize patch deployment across enterprise endpoints due to confirmed active exploitation.
  • Restrict access to untrusted or suspicious websites and HTML content through web filtering.
  • Enable endpoint protection and exploit mitigation features to detect malicious browser activity.
  • Monitor endpoints for unusual Chrome child processes or suspicious post-exploitation activity.
  • Implement application control to prevent unauthorized executables or scripts launched following browser exploitation.
  • Encourage users to restart Chrome after updates to ensure the patched version is active.
  • Monitor threat intelligence feeds for newly disclosed indicators and exploitation techniques related to CVE-2026-85046.
  • Investigate systems that accessed suspicious or malicious webpages before receiving the security update.
  • Maintain centralized browser version inventory to identify vulnerable Chrome installations across the organization.

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo