All Chrome users are being urged to restart their browsers after Google released an urgent security update that patches an actively exploited zero-day vulnerability, tracked as CVE-2026-85046, in the V8 JavaScript engine. The flaw could be triggered when someone visits a malicious website and potentially allows remote code execution (RCE) on an affected computer.
Remote Code Execution is one of the more serious types of security flaws because it can let attackers run malicious commands on a victim’s machine, potentially allowing them to steal sensitive information, install malware or take control of the device. Google says the Stable channel has now been updated to version 152.0.7977.82/.83 for Windows and Mac, while Linux users are receiving 152.0.7977.82. The update is being rolled out over the coming days and weeks.
“Google released another Chrome update that patches an actively exploited flaw in the V8 JavaScript engine, tracked as CVE-2026-85046,” the security team at Malwarebyes explained. “Google rates the vulnerability as high severity and says an exploit already exists in the wild. An attacker could use a crafted HTML page to execute arbitrary code inside the Chrome sandbox. Because it is already being exploited, HKCERT rates the overall risk as extremely high.”
Google also confirmed the severity, stating: “Google is aware that an exploit for CVE-2026-85046 exists in the wild.” The release additionally fixes 11 other vulnerabilities, including nine rated High severity and two classed as Medium.
How to update Chrome
Open Chrome on your computer and click the three dots in the top-right corner. Select Help, followed by About Google Chrome. Chrome will automatically check for the latest software and install it if an update is available. Once the update is installed, click Relaunch to restart the browser and complete the process.
This warning follows another major Chrome security update issued a week earlier that contained 327 fixes, including 10 for critical vulnerabilities. Two of those earlier flaws were noted as particularly worrying because they could potentially be exploited simply by tricking an unsuspecting Chrome user into visiting a malicious website; both could allow arbitrary code execution. With cyber criminals increasingly using fake websites and malicious links to target consumers, keeping Chrome fully updated remains one of the easiest ways to reduce the risk.
