The update fixes a high-severity flaw in Chrome’s V8 engine, but Google has not revealed who is using it or whom they targeted.

Google patched an actively exploited Chrome V8 flaw that enables arbitrary code execution inside the sandbox through a crafted HTML page.

Chrome 152 security update resolves 12 vulnerabilities, including a high-severity type confusion flaw ( CVE-2026-85046) in the V8 engine.