Chrome 152 update patches sixth 2026 zero-day flaw

Google has shipped a new Chrome 152 security update that fixes 12 vulnerabilities, including CVE-2026-85046, a high-severity V8 type confusion bug already exploited as a zero-day in the wild.^[5][11]

The flaw resides in Chrome’s V8 JavaScript and WebAssembly engine and could allow a remote attacker to trigger memory corruption via specially crafted web content, potentially leading to code execution within the browser sandbox.^[5][7]

Google reports that the zero-day has been patched in Chrome versions 152.0.7977.82 and 152.0.7977.83 for Windows and macOS, and 152.0.7977.82 for Linux, with updates rolling out to users on the Stable channel.^[5][11]

CVE-2026-85046 is the sixth Chrome zero-day fixed in 2026, following earlier bugs tracked as CVE-2026-2441, CVE-2026-3909, CVE-2026-3910, CVE-2026-5281, and CVE-2026-11645 that were all patched after signs of active exploitation.^{[5][7][8][9][13]}

Those previous vulnerabilities spanned multiple components, including out-of-bounds write issues in the Skia graphics library and additional V8 flaws that carried CVSS scores of 8.8 and allowed arbitrary code execution inside the browser sandbox.^[7][9][10]

For enterprise defenders, the new Chrome 152 release arrives just days after a broader update that remediated more than 300 vulnerabilities across the browser, underscoring the need for aggressive patching and close monitoring of desktop fleets.^[1][3][12]

Organizations should verify that managed endpoints have received the latest Chrome 152.0.7977.82/.83 builds, enforce rapid updates where auto-patching lags, and continue to track Google’s security advisories for additional technical detail once disclosure restrictions are lifted.^[3][4][11]

References

1. Google Chrome 152 Released With 327 Security Fixes …
3. Chrome Releases: Stable Channel Update for Desktop
4. Chrome 152 Stable Channel Update: 327 Security Fixes
5. Google Patches 6th Chrome Zero-Day of 2026
7. Google Fixes Two Chrome Zero-Days Exploited in the Wild …
8. Google fixes fourth Chrome zero-day exploited in attacks …
9. Google Chrome Patches Fifth Zero-Day of 2026
10. Google patches new Chrome zero-day flaw exploited in the …
11. Google Chrome Releases
12. Chrome 152 Patches Over 300 Vulnerabilities
13. Google patches first Chrome zero-day exploited in attacks …