Chrome CVE-2026-85046 actively exploited; CISA deadline September 18
Google patched Chrome CVE-2026-85046 on September 4 after exploitation was reported, and CISA added it to KEV with a September 18 federal remediation deadline. Enterprise and government defenders should force emergency updates, locate unmanaged endpoints, and hunt for renderer-to-system exploitation activity.
Sources (2)
Updated Sep 9, 2026