Chromium V8 Type Confusion - 20260907001¶
Overview¶
Google have published security updates addressing critical vulnerabilities affecting Chromium-based products. Successful exploitation could allow a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
What is vulnerable?¶
| Products Affected | Version(s) | CVE | CVSS | Severity |
|---|---|---|---|---|
| Chromium-based Browsers - Google Chrome - Microsoft Edge - Brave - Vivaldi |
- Prior to 152.0.7977.82/.83 for Windows and Mac - Prior to 152.0.7977.82 for Linux |
CVE-2026-85046 | 8.8 | High |
What has been observed?¶
Google is aware that an exploit for one of more of the mentioned items exists in the wild. CISA has added one of more of the mentioned items to their Known Exploited Vulnerability catalogue. The WASOC has not received any reports of exploitation of this vulnerability on Western Australian Government networks at the time of writing.
Recommendation¶
The WASOC recommends administrators apply the solutions as per vendor instructions to all affected devices within expected timeframes (refer Patch Management):