Signalis
sign in--:--:--UTC
CVEs

CVE-2026-85046

exploited in the wild☆ pin
CVSS
8.8
Reports
20
First seen
Sep 4, 2026
Last seen
Oct 15, 2026
Affected product

Google Chrome

Associated actors

UNK_DoubleCheck ×4UNK_LateNight ×4UTA0560 ×3UTA0565 ×3JungleBamboo ×3UNK_QuietRacket ×3APT31 ×3ShinyHunters ×1China-aligned espionage groups (BlueMoon campaign) ×1GoldFactory ×1OpenAI agents (malicious swarm) ×1APT29 ×1UNC3569 ×1

Recent reports

Critical

Multiple Vulnerabilities in Palo Alto Products – GovCERT.HK Alert A26-10-22

GovCERT.HKCritical

Chinese Threat Actor UTA0565 Exploits Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

The Hacker NewsCritical

Volexity discovers China-aligned UTA0565 exploiting Chrome and Windows zero-days

CyberScoopCritical

Fake Websites Used to Deploy Chrome & Windows 0-Day Exploits by Chinese APT

VolexityCritical

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE Backdoor

The Hacker NewsHigh

Weekly Recap: AI Agents in Attacks, RubyGems Compromise, WeChat Worm, PaperCut Exploitation

The Hacker NewsMedium

Weekly Threat Intelligence Report – 14 September 2026

Check Point ResearchCritical

BlueMoon exploit kit chains Windows and Chrome zero-days in state-sponsored campaigns

Bleeping ComputerCritical

Chinese espionage groups exploit zero-day chain targeting browsers and Windows

CyberScoopCritical

Chinese espionage groups exploit BlueMoon zero-day chain targeting browsers and Windows

Proofpoint Threat InsightCritical

Chinese Threat Actors UTA0560 and JungleBamboo Chain Chrome & Windows Zero-Days in Coordinated Campaigns

VolexityCritical

BlueMoon Exploit Kit Chains Chrome and Windows Flaws, Deployed by Four Espionage Groups Within Days

The Hacker NewsHigh

Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

The Hacker NewsCritical

Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

The Hacker NewsCritical

Multiple Vulnerabilities in Google Chrome (CVE-2026-85046 exploited in wild)

GovCERT.HKHigh

Google Chrome Vulnerability CVE-2026-85046 Exploited in the Wild

Canadian Centre AlertsHigh

CISA Adds CVE-2026-85046 Google Chromium V8 Type Confusion to Known Exploited Vulnerabilities Catalog

CISA AdvisoriesHigh

Google patches actively exploited Chrome zero-day type confusion flaw in V8 engine

Bleeping ComputerHigh

Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day CVE-2026-85046

The Hacker NewsCritical

Google Chrome Multiple Vulnerabilities

HKCERT

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans