Google has rolled out an emergency patch for a high-severity security vulnerability in Chrome after detecting active in-the-wild exploitation. The bug, tracked as CVE-2026-85046, resides in the V8 engine, the core browser component responsible for executing JavaScript and WebAssembly functions.
As the update rolls out, Google has declined to disclose details regarding the attackers’ identities, victims, or the full scope of the exploit’s capabilities. The tech giant is withholding attack specifics until a majority of users have installed the patch to prevent further exploitation by other malicious actors.
Memory Errors from Mismatched Data
According to technical notes, CVE-2026-85046 is classified as a type-confusion bug. This issue occurs when software mistakenly treats data as an incorrect type, triggering memory errors or unexpected system behavior. To date, Google has not confirmed whether the vulnerability allows hackers to execute remote code.
Security researcher Salvatore Gulizia, also known by the alias Serotav, reported the finding on August 4. For his report, Google awarded a $1,000 bug bounty. The Chrome update not only addresses the V8 vulnerability but also includes 12 security fixes - nine of which are categorized as high-severity, and two as medium-severity.
Windows and Mac users can get this patch on Chrome versions 152.0.7977.82 and 152.0.7977.83, while Linux users will receive version 152.0.7977.82. Google stated that the rollout process will take several days to weeks to complete.
Extension Threats to Crypto Assets
For the Web3 community, browser vulnerabilities have always been a critical weak point. Crypto wallets operating as browser extensions have a long history of being targeted by hackers.
In November 2025, a malicious Chrome extension was caught injecting hidden SOL transfer commands right when users were swapping tokens. Browser-based exploits also hit a Singaporean entrepreneur who lost over $14,000 worth of assets after his browser wallet was compromised by malware disguised as a digital game. This threat is not limited to a single browser platform - in August alone, security teams discovered dozens of fake Firefox extensions specifically designed to harvest users’ crypto wallet credentials.
Given the string of theft cases involving browser extensions, installing the latest Chrome update immediately is an essential security measure for crypto asset holders.
Reported by Decrypt.
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
