← Incidents
INCIDENT 442Exploited vulnerabilityLOW / UNDER REVIEWSourced
CVE-2026-85046 added to CISA KEV: Google Chromium V8 Type Confusion Vulnerability
<p>CISA has added one new vulnerability to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation. </p> <ul> <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-85046" target="_blank">CVE-2026-85046</a> Google Chromium V8 Type Confusion Vulnerability</li> </ul> <p>This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.</p> <p><a href="https://www.cisa.gov/news-events/directives/bod-26-04-implem…
Last evidence update
16 SEP 2026 · 12:00 UTC
Source count
5
Status
reported
GovernmentCVE-2026-85046CVE-2026-87491CVE-2026-58704
Observation history
How this record has evolved as evidence accumulated.
05 SEP · 05:22 UTC
Initial report
05 SEP · 05:22 UTC
Second independent source
05 SEP · 05:22 UTC
Summary updated from new evidence
10 SEP · 05:22 UTC
Second independent source
10 SEP · 05:22 UTC
Related CVE identified (CVE-2026-87491)
17 SEP · 05:22 UTC
Second independent source
17 SEP · 05:22 UTC
Related CVE identified (CVE-2026-58704)
17 SEP · 05:22 UTC
Second independent source
Evidence
CISA KEV · high
CVE-2026-85046 added to CISA KEV: Google Chromium V8 Type Confusion Vulnerability
CISA · high
CISA Adds One Known Exploited Vulnerability to Catalog
CISA KEV · high
CVE-2026-87491 added to CISA KEV: Google Chromium V8 Out of Bounds Write Vulnerability
CISA KEV · high
CVE-2026-58704 added to CISA KEV: Google Pixel Improper Authorization Vulnerability
CISA · high
CISA Adds One Known Exploited Vulnerability to Catalog
Related incidents