{"data":{"id":2323,"lang":"en","title":"Google Patches Sixth Actively Exploited Chrome Zero-Day of 2026","summary":"Google patched CVE-2026-85046, an actively exploited V8 zero-day letting attackers run code via a malicious webpage — the sixth Chrome zero-day fixed in 2026.","category":"technology","category_label":"Technology","published_at":"2026-09-06T10:02:11Z","updated_at":"2026-09-06T10:02:11Z","url":"https://techtools.cz/tools/news/article/2323-google-patches-sixth-actively-exploited-chrome-zero-day-of-2026","api_url":"https://techtools.cz/news-api/v1/articles/2323?lang=en","markdown_url":"https://techtools.cz/news-api/v1/articles/2323.md?lang=en","image_url":"https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjelmC2UuYemuI1nBeaecfPBZ1Bfb5nz6T51_OhCUPHJivX8ioIjrYMVtVsjsrcA0xbEe_O4iMthJ2xwXWJVhAb5CCJlhnJS4McM9IpmPww86RSznT3h7pg5DYOXlnwon616y-1s2qwbWbmR40B5JCvYbtwM8lD5Fk5yLHWS7IKmH5pXQ8qO4SfEasBhhsq/s1700-nu-rw-lo-l85-e365/chrome-v8-exploit.jpg","word_count":158,"reading_time_minutes":1,"sources":[{"url":"https://thehackernews.com/2026/09/google-releases-chrome-update-to-patch.html","domain":"thehackernews.com"},{"url":"https://www.helpnetsecurity.com/2026/09/04/google-chrome-zero-day-cve-2026-85046/","domain":"helpnetsecurity.com"}],"translation":{"lang":"cs","id":2396,"title":"Google opravil šestou aktivně zneužívanou zero-day chybu v Chromu za rok 2026","url":"https://techtools.cz/tools/news/clanek/2396-google-opravil-sestou-aktivne-zneuzivanou-zero-day-chybu-v-chromu-za-rok-2026","api_url":"https://techtools.cz/news-api/v1/articles/2396?lang=cs"},"content":"Google has shipped an emergency Chrome update fixing CVE-2026-85046, a high-severity (CVSS 8.8) type confusion bug in the V8 JavaScript and WebAssembly engine that Google confirms is already being exploited in the wild. A malicious HTML page can trigger the flaw to gain arbitrary read/write access on the JavaScript heap, opening the door to code execution inside the browser's sandbox.\n\nThe bug was reported on August 4, 2026 by researcher Salvatore Gulizia (Serotav), who earned a $1,000 bounty for the find. Google withheld technical exploit details to give users time to update before attackers can widely weaponize the flaw. Fixed versions are Chrome 152.0.7977.82/.83 on Windows and macOS and 152.0.7977.82 on Linux.\n\nThis is the sixth Chrome zero-day Google has patched so far in 2026. CISA added CVE-2026-85046 to its Known Exploited Vulnerabilities catalog on September 4, giving US federal agencies until September 18 to patch. Everyone else should update immediately via chrome://settings/help."}}