Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… (CVE-2026-85045)

CVE-2026-85045 is a race condition in the V8 engine of Google Chrome before version 152.0.7977.82. Exploiting this vulnerability enables remote attackers to execute arbitrary code inside the sandbox environment via a crafted HTML page. The vulnerability is classified under CWE-367 (Time-of-check Time-of-use Race Condition) and has a CVSS 3.1 base score of 7.5, indicating a high impact on confidentiality, integrity, and availability. There are no known exploits in the wild at this time, and no explicit patch or vendor advisory information is provided in the data.

Successful exploitation could allow remote code execution within the sandbox of the affected Chrome browser, potentially compromising confidentiality, integrity, and availability of the affected system. However, the attack requires user interaction (UI:R) and has a high attack complexity (AC:H). No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should monitor official Google Chrome security advisories for updates and apply the update to version 152.0.7977.82 or later once available to remediate this vulnerability.