Chrome V8 Zero-Day Under Attack Gets Emergency Patch
Google patches a high-severity type confusion bug in V8 that has been exploited in the wild, the sixth zero-day fixed this year.
Google on Thursday issued an emergency security update for its Chrome browser to address a high-severity vulnerability that attackers are already actively exploiting in the wild. The bug, tracked as CVE-2026-85046 and carrying a CVSS score of 8.8, is a type confusion flaw in V8, the engine that powers Chrome's JavaScript and WebAssembly handling. The disclosure marks the sixth Chrome zero-day that Google has rushed to patch in 2026, underscoring the escalating cadence of browser-based attacks this year.
Sources
- The Hacker News Original source
Continue Reading
SecurityNewA hands-on way to gauge AI ransomware risk
OWASP volunteers released RAID-AI, a free manual self-assessment that maps AI controls to NIST and CISA frameworks.
SecurityAWS AgentCore Flaw Let One Prompt Hijack All Agents
Researchers say a single chat prompt could extract cloud credentials and let an attacker take over every AgentCore agent in an AWS account and region.
SecurityLightwell Uncovers 400+ Java Library Flaws
IBM and Red Hat's Lightwell project has identified over 400 novel vulnerabilities in Java libraries, launching a clearinghouse service for customers to submit code for review.