{"schema":"vulnpedia.research/1","cve":"CVE-2026-85046","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html","tags":["Release Notes","Vendor Advisory","vendor-reference","KEV report"],"source":"mitre","sourceId":"Chrome","modified":"2026-09-03T19:26:12.609Z","origins":[{"source":"mitre","sourceId":"Chrome","modified":"2026-09-03T19:26:12.609Z","url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html"},{"source":"nvd","sourceId":"CVE-2026-85046","modified":"2026-09-21T13:17:10.970","url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html"},{"source":"redhat","sourceId":"CVE-2026-85046","modified":"2026-09-30T12:19:30+00:00","url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html"},{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","modified":"2026-09-03T00:00:00Z","url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html"}]},{"url":"https://issues.chromium.org/issues/542403045","tags":["Permissions Required","vendor-reference"],"source":"mitre","sourceId":"Chrome","modified":"2026-09-03T19:26:12.609Z","origins":[{"source":"mitre","sourceId":"Chrome","modified":"2026-09-03T19:26:12.609Z","url":"https://issues.chromium.org/issues/542403045"},{"source":"nvd","sourceId":"CVE-2026-85046","modified":"2026-09-21T13:17:10.970","url":"https://issues.chromium.org/issues/542403045"},{"source":"redhat","sourceId":"CVE-2026-85046","modified":"2026-09-30T12:19:30+00:00","url":"https://issues.chromium.org/issues/542403045"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85046","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-09-21T12:53:20.125Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-09-21T12:53:20.125Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85046"},{"source":"nvd","sourceId":"CVE-2026-85046","modified":"2026-09-21T13:17:10.970","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85046"}]},{"url":"https://serotav.github.io/Writeups/v8/when-sorting-leads-to-confusion/","tags":["Exploit","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2026-09-06T01:45:35.051Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-09-06T01:45:35.051Z","url":"https://serotav.github.io/Writeups/v8/when-sorting-leads-to-confusion/"},{"source":"nvd","sourceId":"CVE-2026-85046","modified":"2026-09-21T13:17:10.970","url":"https://serotav.github.io/Writeups/v8/when-sorting-leads-to-confusion/"}]},{"url":"https://github.com/v8/v8/commit/e0562d87ad9c17042b581582c99237d798572e67","tags":["Patch"],"source":"mitre","sourceId":"CVE","modified":"2026-09-06T01:45:35.051Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-09-06T01:45:35.051Z","url":"https://github.com/v8/v8/commit/e0562d87ad9c17042b581582c99237d798572e67"},{"source":"nvd","sourceId":"CVE-2026-85046","modified":"2026-09-21T13:17:10.970","url":"https://github.com/v8/v8/commit/e0562d87ad9c17042b581582c99237d798572e67"}]},{"url":"https://github.com/Serotav/Writeups/blob/77556c57999805fa7815a114da51d91cf24fbea9/v8/When_Sorting_Leads_To_Confusion.md","tags":["Exploit","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2026-09-06T01:45:35.051Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-09-06T01:45:35.051Z","url":"https://github.com/Serotav/Writeups/blob/77556c57999805fa7815a114da51d91cf24fbea9/v8/When_Sorting_Leads_To_Confusion.md"},{"source":"nvd","sourceId":"CVE-2026-85046","modified":"2026-09-21T13:17:10.970","url":"https://github.com/Serotav/Writeups/blob/77556c57999805fa7815a114da51d91cf24fbea9/v8/When_Sorting_Leads_To_Confusion.md"}]},{"url":"https://news.ycombinator.com/item?id=49570669","tags":["Issue Tracking","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2026-09-06T01:45:35.051Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-09-06T01:45:35.051Z","url":"https://news.ycombinator.com/item?id=49570669"},{"source":"nvd","sourceId":"CVE-2026-85046","modified":"2026-09-21T13:17:10.970","url":"https://news.ycombinator.com/item?id=49570669"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85046.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-85046","modified":"2026-09-30T12:19:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-85046","modified":"2026-09-30T12:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85046.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-85046","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-85046","modified":"2026-09-30T12:19:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-85046","modified":"2026-09-30T12:19:30+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-85046"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-85046","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-85046","modified":"2026-09-30T12:19:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-85046","modified":"2026-09-30T12:19:30+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-85046"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85046","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-85046","modified":"2026-09-30T12:19:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-85046","modified":"2026-09-30T12:19:30+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85046"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-85046","modified":"2026-09-30T12:19:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-85046","modified":"2026-09-30T12:19:30+00:00","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog"}]},{"source":"euvd","sourceId":"EUVD-2026-70702","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-70702","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-70702","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-70702"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-85046","modified":"2026-09-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","modified":"2026-09-03T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-85046","modified":"2026-09-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","modified":"2026-09-03T00:00:00Z","url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit"}]},{"url":"https://euvd.enisa.europa.eu/enisa/EUVD-2026-70702","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-85046","modified":"2026-09-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","modified":"2026-09-03T00:00:00Z","url":"https://euvd.enisa.europa.eu/enisa/EUVD-2026-70702"}]},{"url":"https://previdian.com/CVE-2026-85046","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-85046","modified":"2026-09-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","modified":"2026-09-03T00:00:00Z","url":"https://previdian.com/CVE-2026-85046"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-85046","modified":"2026-09-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","modified":"2026-09-03T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://krypt3ia.wordpress.com/2026/09/08/weekly-all-source-cyber-warfare-intelligence-brief-september-8-2026/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-85046","modified":"2026-09-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","modified":"2026-09-03T00:00:00Z","url":"https://krypt3ia.wordpress.com/2026/09/08/weekly-all-source-cyber-warfare-intelligence-brief-september-8-2026/"}]},{"url":"https://www.volexity.com/blog/2026/09/09/mind-the-patch-gap-multiple-chinese-threat-actors-chain-0-day-exploits-in-chrome-windows/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-85046","modified":"2026-09-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","modified":"2026-09-03T00:00:00Z","url":"https://www.volexity.com/blog/2026/09/09/mind-the-patch-gap-multiple-chinese-threat-actors-chain-0-day-exploits-in-chrome-windows/"}]},{"url":"https://www.proofpoint.com/us/blog/threat-insight/once-bluemoon-multiple-state-aligned-threat-actors-rapidly-adopt-novel-exploit","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-85046","modified":"2026-09-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","modified":"2026-09-03T00:00:00Z","url":"https://www.proofpoint.com/us/blog/threat-insight/once-bluemoon-multiple-state-aligned-threat-actors-rapidly-adopt-novel-exploit"}]},{"url":"https://www.volexity.com/blog/2026/09/21/mind-the-patch-gap-part-2-fake-websites-used-to-deploy-chrome-windows-0-day-exploits/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-85046","modified":"2026-09-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","modified":"2026-09-03T00:00:00Z","url":"https://www.volexity.com/blog/2026/09/21/mind-the-patch-gap-part-2-fake-websites-used-to-deploy-chrome-windows-0-day-exploits/"}]},{"url":"https://vulncheck.com/xdb/08fa490dbc7f","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"08fa490dbc7f","modified":"2026-09-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"08fa490dbc7f","modified":"2026-09-03T00:00:00Z","url":"https://vulncheck.com/xdb/08fa490dbc7f"}]},{"url":"https://github.com/adriyansyah-mf/cve-2026-85046-poc","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"08fa490dbc7f","modified":"2026-09-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"08fa490dbc7f","modified":"2026-09-03T00:00:00Z","url":"https://github.com/adriyansyah-mf/cve-2026-85046-poc"}]},{"url":"https://vulncheck.com/xdb/1fd55e15720c","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"1fd55e15720c","modified":"2026-09-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1fd55e15720c","modified":"2026-09-03T00:00:00Z","url":"https://vulncheck.com/xdb/1fd55e15720c"}]},{"url":"https://github.com/SneakyNachos/CVE-2026-85046-who-put-the-silverback-guerilla-in-the-wasm","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"1fd55e15720c","modified":"2026-09-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1fd55e15720c","modified":"2026-09-03T00:00:00Z","url":"https://github.com/SneakyNachos/CVE-2026-85046-who-put-the-silverback-guerilla-in-the-wasm"}]},{"url":"https://vulncheck.com/xdb/2a8a661454b8","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"2a8a661454b8","modified":"2026-09-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"2a8a661454b8","modified":"2026-09-03T00:00:00Z","url":"https://vulncheck.com/xdb/2a8a661454b8"}]},{"url":"https://github.com/SneakyNachos/CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"2a8a661454b8","modified":"2026-09-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"2a8a661454b8","modified":"2026-09-03T00:00:00Z","url":"https://github.com/SneakyNachos/CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass."}]},{"url":"https://vulncheck.com/xdb/b86bc380df3d","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"b86bc380df3d","modified":"2026-09-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"b86bc380df3d","modified":"2026-09-03T00:00:00Z","url":"https://vulncheck.com/xdb/b86bc380df3d"}]},{"url":"https://github.com/jamezx32/CVE-2026-85046","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"b86bc380df3d","modified":"2026-09-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"b86bc380df3d","modified":"2026-09-03T00:00:00Z","url":"https://github.com/jamezx32/CVE-2026-85046"}]},{"url":"https://vulncheck.com/xdb/0d31352194a4","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"0d31352194a4","modified":"2026-09-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0d31352194a4","modified":"2026-09-03T00:00:00Z","url":"https://vulncheck.com/xdb/0d31352194a4"}]},{"url":"https://github.com/Serotav/Writeups","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"0d31352194a4","modified":"2026-09-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0d31352194a4","modified":"2026-09-03T00:00:00Z","url":"https://github.com/Serotav/Writeups"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/HORKimhab/CVE-2026-85046","source":"poc-in-github","sourceId":"CVE-2026-85046","description":"CVE-2026-85046","modified":"2026-09-04T12:27:58Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-85046","url":"https://github.com/HORKimhab/CVE-2026-85046"},{"source":"poc-in-github","sourceId":"CVE-2026-85046","modified":"2026-09-04T12:27:58Z","url":"https://github.com/HORKimhab/CVE-2026-85046"}],"tags":[]},{"url":"https://github.com/ubitquity/CVE-2026-85046-Patch-confusion-zero-day-vulnerability-in-Google-Chrome-s-V8-engine","source":"poc-in-github","sourceId":"CVE-2026-85046","description":"Conceptual C++ patch and structural analysis for CVE-2026-85046, a critical type confusion zero-day vulnerability in Google Chrome's V8 engine","modified":"2026-09-04T11:34:07Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-85046","url":"https://github.com/ubitquity/CVE-2026-85046-Patch-confusion-zero-day-vulnerability-in-Google-Chrome-s-V8-engine"},{"source":"poc-in-github","sourceId":"CVE-2026-85046","modified":"2026-09-04T11:34:07Z","url":"https://github.com/ubitquity/CVE-2026-85046-Patch-confusion-zero-day-vulnerability-in-Google-Chrome-s-V8-engine"}],"tags":[]},{"url":"https://github.com/adriyansyah-mf/cve-2026-85046-poc","source":"poc-in-github","sourceId":"CVE-2026-85046","modified":"2026-09-16T00:03:23Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-85046","url":"https://github.com/adriyansyah-mf/cve-2026-85046-poc"},{"source":"poc-in-github","sourceId":"CVE-2026-85046","modified":"2026-09-16T00:03:23Z","url":"https://github.com/adriyansyah-mf/cve-2026-85046-poc"}],"tags":[]},{"url":"https://github.com/Eliot-code/CVE-2026-85046","source":"poc-in-github","sourceId":"CVE-2026-85046","modified":"2026-09-07T04:59:43Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-85046","url":"https://github.com/Eliot-code/CVE-2026-85046"},{"source":"poc-in-github","sourceId":"CVE-2026-85046","modified":"2026-09-07T04:59:43Z","url":"https://github.com/Eliot-code/CVE-2026-85046"}],"tags":[]},{"url":"https://github.com/SneakyNachos/CVE-2026-85046-who-put-the-silverback-guerilla-in-the-wasm","source":"poc-in-github","sourceId":"CVE-2026-85046","modified":"2026-09-08T19:04:28Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-85046","url":"https://github.com/SneakyNachos/CVE-2026-85046-who-put-the-silverback-guerilla-in-the-wasm"},{"source":"poc-in-github","sourceId":"CVE-2026-85046","modified":"2026-09-08T19:04:28Z","url":"https://github.com/SneakyNachos/CVE-2026-85046-who-put-the-silverback-guerilla-in-the-wasm"}],"tags":[]},{"url":"https://github.com/atiilla/CVE-2026-85046","source":"poc-in-github","sourceId":"CVE-2026-85046","description":"CVE-2026-85046 | Chrome V8 Type Confusion in Inline Array.prototype.sort (Maglev/Turbofan) | CVSS 8.8 | CWE-843 | Chrome < 152.0.7977.82","modified":"2026-10-12T07:32:13Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-85046","url":"https://github.com/atiilla/CVE-2026-85046"},{"source":"poc-in-github","sourceId":"CVE-2026-85046","modified":"2026-10-12T07:32:13Z","url":"https://github.com/atiilla/CVE-2026-85046"}],"tags":[]},{"url":"https://github.com/jamezx32/CVE-2026-85046","source":"poc-in-github","sourceId":"CVE-2026-85046","description":"V8 inlined Array.prototype.sort elements-kind confusion - PoC + addrof (N-day research)","modified":"2026-10-14T11:02:46Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-85046","url":"https://github.com/jamezx32/CVE-2026-85046"},{"source":"poc-in-github","sourceId":"CVE-2026-85046","modified":"2026-10-14T11:02:46Z","url":"https://github.com/jamezx32/CVE-2026-85046"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"08fa490dbc7f","url":"https://vulncheck.com/xdb/08fa490dbc7f","cve":"CVE-2026-85046","dateAdded":"2026-09-07T07:29:24Z","modified":"2026-09-03T00:00:00Z","exploitType":"client-side","repositoryUrl":"https://github.com/adriyansyah-mf/cve-2026-85046-poc","observations":[{"dateAdded":"2026-09-07T07:29:24Z","exploitType":"client-side"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"08fa490dbc7f","modified":"2026-09-03T00:00:00Z","url":"https://vulncheck.com/xdb/08fa490dbc7f"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"1fd55e15720c","url":"https://vulncheck.com/xdb/1fd55e15720c","cve":"CVE-2026-85046","dateAdded":"2026-09-08T23:05:15Z","modified":"2026-09-03T00:00:00Z","exploitType":"client-side","repositoryUrl":"https://github.com/SneakyNachos/CVE-2026-85046-who-put-the-silverback-guerilla-in-the-wasm","observations":[{"dateAdded":"2026-09-08T23:05:15Z","exploitType":"client-side"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"1fd55e15720c","modified":"2026-09-03T00:00:00Z","url":"https://vulncheck.com/xdb/1fd55e15720c"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"2a8a661454b8","url":"https://vulncheck.com/xdb/2a8a661454b8","cve":"CVE-2026-85046","dateAdded":"2026-09-14T13:59:50Z","modified":"2026-09-03T00:00:00Z","exploitType":"client-side","repositoryUrl":"https://github.com/SneakyNachos/CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.","observations":[{"dateAdded":"2026-09-14T13:59:50Z","exploitType":"client-side"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"2a8a661454b8","modified":"2026-09-03T00:00:00Z","url":"https://vulncheck.com/xdb/2a8a661454b8"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"b86bc380df3d","url":"https://vulncheck.com/xdb/b86bc380df3d","cve":"CVE-2026-85046","dateAdded":"2026-10-14T20:00:38Z","modified":"2026-09-03T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/jamezx32/CVE-2026-85046","observations":[{"dateAdded":"2026-10-14T20:00:38Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"b86bc380df3d","modified":"2026-09-03T00:00:00Z","url":"https://vulncheck.com/xdb/b86bc380df3d"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"0d31352194a4","url":"https://vulncheck.com/xdb/0d31352194a4","cve":"CVE-2026-85046","dateAdded":"2026-10-21T14:10:40Z","modified":"2026-09-03T00:00:00Z","exploitType":"client-side","repositoryUrl":"https://github.com/Serotav/Writeups","observations":[{"dateAdded":"2026-10-21T14:10:40Z","exploitType":"client-side"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"0d31352194a4","modified":"2026-09-03T00:00:00Z","url":"https://vulncheck.com/xdb/0d31352194a4"}]}],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-85046","modified":"2026-09-30T12:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85046.json","productId":"red_hat_products","product":"All currently supported Red Hat products","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","origins":[{"source":"redhat","sourceId":"CVE-2026-85046","modified":"2026-09-30T12:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85046.json"}]}],"vendorCoverage":{"total":1,"shown":1,"omitted":0,"source":"redhat"},"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-09-03T00:00:00Z","modified":"2026-09-03T00:00:00Z","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Google","product":"Chromium V8","dueDate":"2026-09-18T00:00:00Z","cisaDateAdded":"2026-09-04T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","modified":"2026-09-03T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","catalog":"VulnCheck KEV","kind":"report","url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html","dateAdded":"2026-09-03T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html"},{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit"},{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","url":"https://euvd.enisa.europa.eu/enisa/EUVD-2026-70702"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","catalog":"VulnCheck KEV","kind":"report","url":"https://previdian.com/CVE-2026-85046","dateAdded":"2026-09-04T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","url":"https://previdian.com/CVE-2026-85046"},{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","catalog":"VulnCheck KEV","kind":"report","url":"https://krypt3ia.wordpress.com/2026/09/08/weekly-all-source-cyber-warfare-intelligence-brief-september-8-2026/","dateAdded":"2026-09-08T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","url":"https://krypt3ia.wordpress.com/2026/09/08/weekly-all-source-cyber-warfare-intelligence-brief-september-8-2026/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","catalog":"VulnCheck KEV","kind":"report","url":"https://www.volexity.com/blog/2026/09/09/mind-the-patch-gap-multiple-chinese-threat-actors-chain-0-day-exploits-in-chrome-windows/","dateAdded":"2026-09-09T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","url":"https://www.volexity.com/blog/2026/09/09/mind-the-patch-gap-multiple-chinese-threat-actors-chain-0-day-exploits-in-chrome-windows/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","catalog":"VulnCheck KEV","kind":"report","url":"https://www.proofpoint.com/us/blog/threat-insight/once-bluemoon-multiple-state-aligned-threat-actors-rapidly-adopt-novel-exploit","dateAdded":"2026-09-14T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","url":"https://www.proofpoint.com/us/blog/threat-insight/once-bluemoon-multiple-state-aligned-threat-actors-rapidly-adopt-novel-exploit"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","catalog":"VulnCheck KEV","kind":"report","url":"https://www.volexity.com/blog/2026/09/21/mind-the-patch-gap-part-2-fake-websites-used-to-deploy-chrome-windows-0-day-exploits/","dateAdded":"2026-09-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-85046","url":"https://www.volexity.com/blog/2026/09/21/mind-the-patch-gap-part-2-fake-websites-used-to-deploy-chrome-windows-0-day-exploits/"}]}]}