BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Patch Sonar//CISA patch deadlines//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Patch Sonar deadlines: Web browsers
X-WR-CALDESC:Federal fix deadlines for actively exploited vulnerabilities\,
  from CISA's KEV catalog. patchsonar.com
REFRESH-INTERVAL;VALUE=DURATION:PT6H
X-PUBLISHED-TTL:PT6H
BEGIN:VEVENT
UID:CVE-2026-87491@patchsonar.com
DTSTAMP:20260909T000000Z
DTSTART;VALUE=DATE:20260923
DTEND;VALUE=DATE:20260924
SUMMARY:Patch deadline: Google Chromium V8 (CVE-2026-87491)
DESCRIPTION:Google Chromium V8 Out of Bounds Write Vulnerability\n\nGoogle 
 Chromium V8 contains an out of bounds write vulnerability that allows a re
 mote attacker to execute arbitrary code inside the sandbox via a crafted H
 TML page. This vulnerability could affect multiple web browsers that utili
 ze Chromium\, including\, but not limited to\, Google Chrome\, Microsoft E
 dge\, and Opera.\n\nCISA's required action: Apply mitigations in accordanc
 e with vendor instructions\, ensuring compliance with CISA’s BOD 26-04 P
 rioritizing Security Updates Based on Risk (see URL in Notes) guidance and
  CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow a
 pplicable BOD 26-04 guidance for cloud services or discontinue use of the 
 product if mitigations are unavailable. Stakeholders are responsible for e
 valuating each asset's internet exposure and ensuring adherence to BOD 26-
 04 patching guidelines.\n\nListed by CISA on 2026-09-09. More: https://pat
 chsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-87491
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-85046@patchsonar.com
DTSTAMP:20260904T000000Z
DTSTART;VALUE=DATE:20260918
DTEND;VALUE=DATE:20260919
SUMMARY:Patch deadline: Google Chromium V8 (CVE-2026-85046)
DESCRIPTION:Google Chromium V8 Type Confusion Vulnerability\n\nGoogle Chrom
 ium V8 contains a type confusion vulnerability that allows a remote attack
 er to execute arbitrary code inside the sandbox via a crafted HTML page. T
 his vulnerability could affect multiple web browsers that utilize Chromium
 \, including\, but not limited to\, Google Chrome\, Microsoft Edge\, and O
 pera.\n\nCISA's required action: Apply mitigations in accordance with vend
 or instructions\, ensuring compliance with CISA’s BOD 26-04 Prioritizing
  Security Updates Based on Risk (see URL in Notes) guidance and CISA’s 
 “Forensics Triage Requirements” (see URL in Notes). Follow applicable 
 BOD 26-04 guidance for cloud services or discontinue use of the product if
  mitigations are unavailable. Stakeholders are responsible for evaluating 
 each asset's internet exposure and ensuring adherence to BOD 26-04 patchin
 g guidelines.\n\nListed by CISA on 2026-09-04. More: https://patchsonar.co
 m/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-85046
TRANSP:TRANSPARENT
END:VEVENT
END:VCALENDAR
