The exploited issue is a type confusion bug residing in V8, Chrome's JavaScript and WebAssembly engine. This vulnerability, tracked as CVE-2026-85046, carries a CVSS score of 8.8 and affects Chrome versions prior to 152.0.7977.82.

• Affected Product: Google Chrome (Windows, macOS, and Linux)
• Fixed Version: 152.0.7977.82
• Vulnerability Type: Type confusion in V8
• Severity: High (CVSS 8.8)
• Exploitation Status: Actively exploited

Given the confirmed in-the-wild exploitation, administrators and users are strongly advised to apply the update immediately to prevent potential compromise. Standard mitigation steps include:

• Update Chrome to version 152.0.7977.82 or later via the browser's built-in update mechanism.
• Restart the browser after the update to ensure the patch is fully applied.
• Consider enabling automatic updates to avoid delays in receiving future security patches.

Source: The Hacker News

Is your organization tracking Chrome baseline versions across endpoints, and how quickly can you verify that all systems are running the patched release?