⚡️ 0-Day Alert: Chrome v8 RCE exploited in the wild
CVE-2026-85046: v8 array-builtin callback side-effect to elements-kind transition confusion.
Affects both Turbofan and Maglev.
Exploit will work in default config but requires multiple other bugs to achieve arbitrary code execution on the system. The bug alone without helpers could do for an UXSS.
Patched in Chrome 152.0.7977.82/.83
Post #231
660
