Race Condition Vulnerability in Google Chrome
CVE-2026-85045
7.5HIGH
Key Information:
Badges
๐พ Exploit Exists๐ฐ News Worthy
What is CVE-2026-85045?
A race condition vulnerability in the V8 engine of Google Chrome versions prior to 152.0.7977.82 poses a risk where a remote attacker can exploit this flaw to execute arbitrary code. This attack can occur through crafted HTML pages, potentially leading to unauthorized actions within the sandboxed environment of the browser. Such vulnerabilities highlight the importance of timely updates to ensure user security against emerging threats.
Affected Version(s)
Chrome 152.0.7977.82
News Articles
Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
XBOW built an AI-assisted, three-bug Chrome exploit chain in six days that enabled Windows code execution; Google has fixed all three bugs.
1 day ago
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
- ๐พ
Exploit known to exist
- ๐ฐ
First article discovered by The Hacker News
Vulnerability published
Vulnerability Reserved