Google patches multiple Chrome bugs including a V8 flaw being used in attacks

Google released patches for 12 Chrome vulnerabilities on 3 September, notably CVE-2026-85046, a type-confusion flaw in the V8 engine that is already being exploited and marks the sixth actively-exploited V8 issue this year. In eight days the Cyber Resilience Act will require manufacturers to report any actively-exploited vulnerability within 24 hours of discovery.