# Google Chrome multiple vulnerabilities active exploitation

Published: 2026-09-04 · Severity: severe
Canonical: https://vorant.io/reports/9bec93c4-e247-5873-9d8b-839b6a73a178/google-chrome-multiple-vulnerabilities-active-exploitation

> Multiple unspecified vulnerabilities in Chrome versions before 152.0.7977.82/83; CVE-2026-85046 actively exploited in the wild.

CERT-FR has issued an advisory covering multiple vulnerabilities discovered in Google Chrome across Windows, Linux, and macOS platforms. The affected versions are Chrome prior to 152.0.7977.82 on Linux and Windows, and prior to 152.0.7977.83 on macOS. Google has confirmed that CVE-2026-85046 is actively being exploited in the field. The nature of the security issues has not been specified by Google, but the active exploitation status elevates the urgency of patching. Defenders should prioritize updating all Chrome deployments to the patched versions immediately, particularly given the confirmed in-the-wild exploitation of at least one vulnerability in this bundle.

## Mentioned in this report

- Vulnerabilities: CVE-2026-85042, CVE-2026-85043, CVE-2026-85044, CVE-2026-85045, CVE-2026-85046 (KEV), CVE-2026-85047, CVE-2026-85048, CVE-2026-85049, CVE-2026-85050, CVE-2026-85051, CVE-2026-85052, CVE-2026-85053

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1112

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/9bec93c4-e247-5873-9d8b-839b6a73a178/google-chrome-multiple-vulnerabilities-active-exploitation.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup