[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8_cL8Li2mO15Xk1PfPT0xND7HosiE6lOHC0HSLHzEe0":3},{"article":4,"iocs":49,"watch_terms":69,"solutions":70,"lesson":167},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"ac87bd45-ee66-4e87-9a8e-c83fff4a1837","Google warns of new Chrome zero-day flaw exploited in attacks","google-warns-of-new-chrome-zero-day-flaw-exploited-in-attacks-dc2f42","Google has updated the Chrome browser to address an actively exploited high-severity zero-day flaw in the V8 engine and 11 other vulnerabilities. [...]","Google has released an update for Chrome to fix a high-severity zero-day vulnerability, CVE-2026-85046, a type confusion flaw in the V8 JavaScript engine that has been exploited in the wild. This is the sixth actively exploited bug Google has patched in Chrome this year, highlighting ongoing threats to browser security. Users are urged to update their browsers promptly.","Google Chrome addresses actively exploited zero-day flaw in V8 engine.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fgoogle-warns-of-new-chrome-zero-day-flaw-exploited-in-attacks\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F03\u002F13\u002FGoogle_Chrome.jpg","2026-09-04T11:48:17+00:00","2026-09-04T12:00:20.093974+00:00",9,[17,20,23,25,27,29],{"name":18,"type":19},"Chrome","product",{"name":21,"type":22},"V8 engine","technology",{"name":24,"type":19},"Microsoft Edge",{"name":26,"type":19},"Brave",{"name":28,"type":19},"Opera",{"name":30,"type":19},"Vivaldi","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,42,44],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":43},{"id":31,"icon":33,"name":34,"slug":35},{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[50,54,57,60,63,66],{"type":51,"value":52,"context":53},"cve","CVE-2026-85046","Actively exploited zero-day flaw in Chrome's V8 engine.",{"type":51,"value":55,"context":56},"CVE-2026-11645","Out-of-bounds read\u002Fwrite in V8 engine, previously exploited.",{"type":51,"value":58,"context":59},"CVE-2026-2441","Iterator invalidation in CSSFontFeatureValuesMap, previously patched.",{"type":51,"value":61,"context":62},"CVE-2026-3909","Out-of-bounds write in Skia graphics library, previously exploited.",{"type":51,"value":64,"context":65},"CVE-2026-3910","Inappropriate implementation in V8 engine, previously exploited.",{"type":51,"value":67,"context":68},"CVE-2026-5281","Use-after-free vulnerability in Dawn, previously patched.",[18,24,26],{"controls":71,"vendors":159},[72,101,130],{"slug":73,"name":74,"problem":75,"products":76},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[77,85,93],{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":102,"name":103,"problem":104,"products":105},"patch-management","Automated patch management","Known holes get closed in days, not months.",[106,114,122],{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"slug":131,"name":132,"problem":133,"products":134},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[135,143,151],{"vendor_slug":136,"vendor_name":137,"vendor_logo":138,"product_slug":139,"product_name":140,"url":141,"description":142},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":144,"vendor_name":145,"vendor_logo":146,"product_slug":147,"product_name":148,"url":149,"description":150},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"vendor_slug":152,"vendor_name":153,"vendor_logo":154,"product_slug":155,"product_name":156,"url":157,"description":158},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",[160],{"slug":161,"name":162,"logo_path":163,"roles":164},"google","Google","\u002Fvendor-logos\u002Fgoogle.png",[165,166],"reported_by","affected",{"slug":168,"title":169,"body":170,"framework_refs":171,"framework_notes":180},"chrome-zero-day-exploited-in-the-wild-update-immediately","Chrome Zero-Day Exploited in the Wild — Update Immediately","Google patched CVE-2026-85046, a high-severity type confusion flaw in Chrome's V8 JavaScript engine that was actively exploited before a fix was available, making it a zero-day vulnerability. This marks the sixth actively exploited Chrome vulnerability patched this year, underscoring that browsers are a persistent and high-value attack surface. Because zero-days are exploited before patches exist, the only defense after disclosure is rapid update deployment. Organizations that delay browser updates — even by days — leave users exposed to drive-by attacks, credential theft, and malware installation simply by visiting a compromised website.",[172,173,174,175,176,177,178,179],"CIS Control 2 – Inventory and Control of Software Assets","CIS Control 7 – Continuous Vulnerability Management","NIST SP 800-40 Rev. 4 – Guide to Enterprise Patch Management","NIST SI-2 – Flaw Remediation","NIST RA-5 – Vulnerability Monitoring and Scanning","CISA KEV (Known Exploited Vulnerabilities) Catalog","ITIL Change Management – Emergency Change Process","ISO\u002FIEC 27001:2022 – Annex A 8.8 Management of Technical Vulnerabilities",{}]