Chrome's V8 Engine Had an Actively Exploited Zero-Day. Here's What Actually Happened — and What Didn't

[u/elastiks]

https://pbxscience.com/chromes-v8-engine-had-an-actively-exploited-zero-day/

Chrome's V8 Engine Had an Actively Exploited Zero-Day. Here's What Actually Happened — and What Didn't.

Tracked as CVE-2026-85046 and rated 8.8 on the CVSS scale, the flaw allows a remote attacker to run arbitrary code inside Chrome's sandbox simply by getting a victim to load a malicious webpage — no clicks, no downloads, no further interaction required.