Race Condition Vulnerability in Google Chrome
CVE-2026-85045

7.5HIGH

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
3 September 2026

Badges

๐Ÿ‘พ Exploit Exists๐Ÿ“ฐ News Worthy

What is CVE-2026-85045?

A race condition vulnerability in the V8 engine of Google Chrome versions prior to 152.0.7977.82 poses a risk where a remote attacker can exploit this flaw to execute arbitrary code. This attack can occur through crafted HTML pages, potentially leading to unauthorized actions within the sandboxed environment of the browser. Such vulnerabilities highlight the importance of timely updates to ensure user security against emerging threats.

Affected Version(s)

Chrome 152.0.7977.82

News Articles

Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days

XBOW built an AI-assisted, three-bug Chrome exploit chain in six days that enabled Windows code execution; Google has fixed all three bugs.

1 day ago

References

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • ๐Ÿ‘พ

    Exploit known to exist

  • ๐Ÿ“ฐ

    First article discovered by The Hacker News

  • Vulnerability published

  • Vulnerability Reserved

.