Google Rushes Chrome Updates to Patch Actively Exploited Security Flaws

Google's Chrome browser has long been a target for cyber attackers due to its widespread use. Security researchers and Google's own teams regularly discover vulnerabilities in the browser's code, particularly in complex components like the V8 JavaScript engine.

In early September 2026, Google identified a cluster of security flaws, including some that could allow attackers to take control of affected systems. These vulnerabilities were significant enough to prompt quick action from Google's security team.

On September 2, 2026, Google released updates for Chrome version 152.0.7977.75/.76 for Windows and macOS, and 152.0.7977.75 for Linux, patching 26 vulnerabilities. Two of these were critical use-after-free flaws, which can let attackers run arbitrary code if exploited, a risk flagged by security advisories.

Days later, on September 4, Google issued another emergency update after discovering that some vulnerabilities were being exploited in real-world attacks. Among the 12 flaws patched, CVE-2026-85046 stood out as a high-severity zero-day vulnerability affecting the V8 JavaScript and WebAssembly engine. This flaw allows attackers to execute code on victims' machines simply by getting them to visit a malicious website.

The company confirmed that this vulnerability was already being used in active attacks. Security organizations and government agencies, such as the U.S. Cybersecurity and Infrastructure Security Agency (CISA), quickly added the flaw to their lists of known exploited vulnerabilities. Experts and news outlets urged users to update Chrome immediately to protect against these threats.

This latest incident marked the sixth zero-day vulnerability in Chrome to be patched in 2026, reflecting persistent targeting of the browser by hackers.

Google's emergency updates are now available for all major desktop platforms. Users are encouraged to update their browsers as soon as possible, as attackers are actively exploiting at least one of the patched flaws.

Security advisories stress that failing to update leaves users vulnerable to attacks that could result in stolen data or compromised devices. The patched vulnerabilities are now widely documented, and the risk of exploitation remains high for unpatched systems.

Security experts are monitoring for further attacks that may take advantage of these or similar browser vulnerabilities. Google is expected to continue releasing updates as new issues are found, and users should remain vigilant about applying browser patches promptly.

There may also be further disclosures about the methods attackers used to exploit these vulnerabilities, which could help improve browser security in the future.