Skip to content

CVE-2026-85046

Named by 2 kept items in this workspace.

Search every workspace for CVE-2026-85046. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • Once in a BlueMoon: Multiple State-Aligned Threat Actors Rapidly Adopt Novel Chrome/Windows Zero-Day Chain
    writeup2026-09-09

    Type-confusion (RCE) vulnerability in Chromium V8 JavaScript engine's JIT compiler (TurboFan/Maglev), abused via array mutation mid-sort during Array.prototype.sort optimization to achieve addrof/fakeobj primitives and heap read/write. Fix committed 7 August 2026 but not rolled into general stable C

  • Patch Tuesday - September 2026
    advisory2026-09-08It is written here as CVE-2026-85046 (V8 JavaScript engine zero-day exploited in the wild; patched in Chrome on September 3, 2026 and in Edge stable on September 2, 2026; no Microsoft advisory published as of the post).

    V8 JavaScript engine zero-day exploited in the wild; patched in Chrome on September 3, 2026 and in Edge stable on September 2, 2026; no Microsoft advisory published as of the post

All cves in this workspace.