CVE-2026-85045

Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected

Google · Chrome

CVSS v3.1 CNA

7.5 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.21% chance of exploitation in the next 30 days, 11th percentile

Published

2026-09-03

Updated

2026-09-04

Proof-of-concept exploits (1)

• SneakyNachos/CVE-2026-850451★ · 2026-09-17

Security advisories

• https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_018827973…

References

• CVE Record
• NVD entry

Related

• CVE-2024-29943
• CVE-2026-12295
• CVE-2026-15718
• CVE-2026-2764
• CVE-2026-2766
• CVE-2026-2796