Google rolls out emergency Chrome patch to fix critical zero-day flaw
Google released an urgent update for Chrome after a researcher reported a severe zero-day vulnerability that is already being exploited.
A critical zero-day vulnerability, designated CVE-2026-85046, was discovered in Google Chrome by researcher Salvatore Gulizia, who reported it to the company. Google acknowledged that the flaw is already being used in the wild and released an emergency update covering Windows, macOS and Linux, containing twelve security fixes. The bug could be triggered when a user visits a malicious HTML page, potentially allowing attackers to execute code, crash the browser tab, or exfiltrate sensitive information.
No information was provided about the attackers or the number of victims. Google advised all Chrome users to install the update via Settings > About Chrome without delay. This follows earlier warnings from Google’s Threat Intelligence Group about AI-generated zero-day exploits.
