Google has released a security update for the Chrome browser to address a high-severity vulnerability identified as CVE-2026-85046. The company confirmed that this flaw, which affects the V8 engine used for JavaScript and WebAssembly, is already being actively exploited by attackers in the wild.
The patch is included in Chrome versions 152.0.7977.82 and 152.0.7977.83 for Windows and Mac, and version 152.0.7977.82 for Linux. Google stated that the update will be rolled out to users over the coming days and weeks. The vulnerability was reported by security researcher Salvatore Gulizia on August 4, for which he received a $1,000 bug bounty.
The latest browser update contains a total of 12 security fixes, including nine high-severity and two medium-severity bugs. Google is currently withholding specific technical details regarding these vulnerabilities until the majority of users and third-party projects have successfully installed the patches to ensure system security.
While Google has not linked the current exploit to cryptocurrency theft, the company noted that browser-based wallets and trading extensions remain frequent targets for attackers. Previous incidents have involved malicious extensions and malware designed to drain funds from browser-connected wallets, though no direct connection to this specific zero-day has been established.