Update this weekGoogle ChromeWeb browsers

Chrome's sixth zero-day of the year is patched

Who's affected: Chrome users on Windows, Mac, Linux and Android.
Under attack?: Yes. Google says an exploit exists but hasn't shared details. A malicious web page could run code inside the browser.
What to do: Open the Chrome menu, go to Help, then About Google Chrome. Let it update, then relaunch. IT teams should check versions across devices instead of relying on auto-update.
Fixed in: 152.0.7977.82 or later
CISA deadline: Federal agencies must fix this by Sep 18, 2026. Everyone else should treat that as a ceiling, not a target.

CVE-2026-85046Chance of attack in 30 days: 2% (EPSS)Listed Sep 4, 2026Source: eSecurity Planet ↗

Google scorecard: every exploited Google flaw →

Client notice ready to send

Fill in the bracketed parts, then paste into an email to your clients or team.

Subject: Security update: Google Chrome

Hi [Client name],

Attackers are actively exploiting a security flaw in Google Chrome.

Who's affected: Chrome users on Windows, Mac, Linux and Android.

What we're doing: [We're checking your systems now and will have the fix in place by DATE.]

What to do: Open the Chrome menu, go to Help, then About Google Chrome. Let it update, then relaunch. IT teams should check versions across devices instead of relying on auto-update.

Fixed in: 152.0.7977.82 or later
Reference: CVE-2026-85046 – https://esecurityplanet.com/threats/news-google-chrome-cve-2026-85046-zero-day

We'll confirm once everything is updated. Reply here with any questions.

[Your name]

Chrome's sixth zero-day of the year is patched

Also under attack in Web browsers