Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… (CVE-2026-85046)

CVE-2026-85046 is a type confusion vulnerability in the V8 engine of Google Chrome before version 152.0.7977.82. Exploiting this flaw, a remote attacker can execute arbitrary code inside the sandbox environment by crafting a malicious HTML page. The vulnerability is classified under CWE-843 (Type Confusion) and has a CVSS v3.1 score of 8.8, indicating high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported. The vulnerability affects Chrome versions prior to 152.0.7977.82.

Successful exploitation allows remote code execution inside the sandbox, potentially compromising browser security and user data confidentiality, integrity, and availability. The high CVSS score reflects the critical nature of this vulnerability, although no active exploitation has been observed.

A fix is available in Google Chrome version 152.0.7977.82. Users and administrators should update to this version or later to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.