CVE-2026-85045

Received Received - Intake

Race Condition in Google Chrome V8 Engine Allows Code Execution

Publication date: 2026-09-03

Last updated on: 2026-09-08

Assigner: Chrome

Description

Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-03

Last Modified

2026-09-08

Generated

2026-09-24

AI Q&A

2026-09-03

EPSS Evaluated

2026-09-22

NVD

CVE-2026-85045

EUVD

EUVD-2026-70706

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 152.0.7977.82 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-367	The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.

Attack-Flow Graph

Executive Summary

This is a race condition vulnerability in V8, the JavaScript engine used by Google Chrome. A race condition occurs when the behavior of a program depends on the sequence or timing of uncontrollable events. In this case, the flaw allows a remote attacker to execute arbitrary code inside Chrome's sandbox by tricking a user into visiting a specially crafted HTML page.

Detection Guidance

This vulnerability is specific to Google Chrome and requires detecting outdated versions. Check Chrome version via command line: chrome --version or about:support in browser. Compare against patched version 152.0.7977.82. Network detection involves monitoring for exploit attempts targeting the V8 race condition in Chrome traffic.

Impact Analysis

If exploited, this vulnerability could allow an attacker to run malicious code on your computer through Chrome, even if the sandbox is active. This could lead to unauthorized access to your data, installation of malware, or other malicious activities while you are browsing.

Compliance Impact

This vulnerability could potentially lead to unauthorized code execution, which may result in data breaches or unauthorized access to sensitive information. Such incidents could violate GDPR's data protection requirements or HIPAA's safeguards for protected health information, depending on the affected system and data involved.

Mitigation Strategies

Update Google Chrome to version 152.0.7977.82 or later to address the race condition in V8.

Hi! I’m here to help you understand CVE-2026-85045. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70