CVE-2026-85046

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.82

Description A high-severity type confusion issue exists in the V8 JavaScript and WebAssembly engine. This flaw occurs when the V8 optimizer incorrectly validates the element type of an array during a sorting operation, specifically when inlining Array.prototype.sort(). An attacker can manipulate the array's element type using a comparator function, leading V8 to treat object pointers as small integers. This results in memory corruption, providing an address-disclosure primitive and the ability to perform arbitrary read and write operations within the JavaScript heap. By exploiting this, a remote attacker can execute arbitrary code inside the renderer sandbox when a user visits a specially crafted HTML page. This issue has been confirmed to be exploited in the wild.

Recommendations Update Google Chrome to version 152.0.7977.82 or later and fully relaunch the browser to ensure the patched code is active in memory.