Google Issues Emergency Chrome Update to Patch Actively Exploited V8 Vulnerability

Google has pushed an urgent update to the stable channel of its Chrome browser to close a high‑severity flaw in the V8 JavaScript and WebAssembly engine, identified as CVE‑2026‑85046. The company’s bulletin describes the vulnerability as being actively exploited in the wild, prompting immediate deployment of the fix to all supported platforms.

The defect stems from a type‑confusion error inside V8, the engine that powers JavaScript execution and WebAssembly translation in Chrome. By manipulating the way the engine interprets data types, a remote attacker can trick the browser into executing arbitrary code. Because the flaw resides in a core component that processes virtually every web page, it carries a high risk of compromise if left unpatched.

Security researchers at GBHackers were the first to publicize evidence that threat actors were leveraging the vulnerability in live attacks. Their analysis indicated that malicious web pages could deliver crafted payloads that trigger the type‑confusion bug, potentially granting attackers the ability to run code with the same privileges as the user’s Chrome process. The rapid emergence of exploit activity underscored the urgency of a swift response.

Google’s response has been to release the patch through the standard automatic‑update mechanism, meaning most users will receive the fix without manual intervention. For environments where automatic updates are disabled, administrators are urged to apply the update manually and verify that the browser version reflects the new build number. The company also recommends clearing browser caches and restarting Chrome after installation to ensure the vulnerable components are fully replaced.

Because V8 is shared across Chromium‑based browsers, the vulnerability could affect other products that embed the engine, such as Microsoft Edge, Opera, and a range of desktop and mobile applications. Security experts advise users of those browsers to check for corresponding updates from their vendors. The episode highlights the ongoing arms race between browser developers and exploit writers, and it reinforces the importance of frequent security patches in a landscape where attackers constantly probe for weaknesses. As Google monitors the situation, further advisories may be issued if additional variants of the exploit surface.