<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Patch Sonar: Web browsers</title>
    <link>https://patchsonar.com/tech/browsers</link>
    <description>Exploited vulnerabilities in web browsers, in plain English.</description>
    <language>en-us</language>
    <atom:link href="https://patchsonar.com/feeds/browsers.xml" rel="self" type="application/rss+xml"/>
    <item>
      <title>Zero-day: Google Chrome: Chrome's sixth zero-day of the year is patched</title>
      <link>https://patchsonar.com/cve/CVE-2026-85046</link>
      <guid isPermaLink="true">https://patchsonar.com/cve/CVE-2026-85046</guid>
      <pubDate>Fri, 04 Sep 2026 12:00:00 GMT</pubDate>
      <category>Web browsers</category>
      <description>Yes. Google says an exploit exists but hasn't shared details. A malicious web page could run code inside the browser. What to do: Open the Chrome menu, go to Help, then About Google Chrome. Let it update, then relaunch. IT teams should check versions across devices instead of relying on auto-update.</description>
    </item>
    <item>
      <title>Zero-day: Google Chromium V8: Google Chromium V8 Out of Bounds Write Vulnerability</title>
      <link>https://patchsonar.com/cve/CVE-2026-87491</link>
      <guid isPermaLink="true">https://patchsonar.com/cve/CVE-2026-87491</guid>
      <pubDate>Wed, 09 Sep 2026 12:00:00 GMT</pubDate>
      <category>Web browsers</category>
      <description>Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 9, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.</description>
    </item>
  </channel>
</rss>
