Tag: cve 2026 85046
8 articles
China-Aligned Group Exploits Chrome, Microsoft Zero-Days
A China-aligned threat group has been exploiting a chain of three zero-day vulnerabilities in Google Chrome and Microsoft Windows, highlighting a coordinated effort within the Chinese computer network exploitation community. This alarming discovery reveals the group's ability to rapidly weaponize and customize exploits across multiple campaigns.
China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain
Meet the sneaky hackers who just pulled off a triple threat: exploiting not one, not two, but three zero-day vulnerabilities to break free from Chrome's sandbox and wreak havoc on Windows hosts. Their latest move? A targeted spear-phish attack on NGOs via a cleverly crafted link.
BlueMoon Exploit Kit Targets Windows, Chrome with Zero-Day Flaws
Meet BlueMoon, a sneaky exploit kit that's been wreaking havoc on Windows and Chrome since August 28, using not one, not two, but three zero-day flaws to do its dirty work. This malicious tool, linked to the JungleBamboo threat actor, combines browser vulnerabilities with a Windows kernel exploit to gain ultimate control.
Chinese Espionage Groups Exploit Zero-Day Chain in Browser, Windows Attacks
Meet the BlueMoon exploit chain, a powerful attack tool that links three zero-day vulnerabilities to give hackers full access to your computer - and it happened before patches were even available to the public. This sneaky chain targets popular browsers like Chrome and Windows, allowing attackers to run code, escape browser safeguards, and take control.
China-linked groups exploit BlueMoon kit to breach US and Southeast Asia targets
China-linked groups are leveraging the BlueMoon exploit kit to launch targeted attacks on organizations in the US and Southeast Asia, with a surprisingly small number of groups behind a large-scale intrusion campaign that quickly evolved from testing to widespread reuse. Fewer than 20 organizations globally were hit, but experts warn the actual number is likely much higher.
Multiple Spy Groups Exploit Chrome, Windows Flaws with BlueMoon Kit
Multiple spy groups are rapidly adopting the BlueMoon exploit kit, leveraging vulnerabilities in Google Chrome and Microsoft Windows to carry out espionage operations, with a suspected China nexus. This kit chains together flaws in Chrome's V8 JavaScript engine and Windows, including several zero-day exploits.
Google Discloses Chrome 0-Day Under Active Exploitation
Google just revealed a high-severity Chrome zero-day vulnerability, CVE-2026-85046, that's being actively exploited by hackers, allowing them to execute malicious code inside the browser's sandbox. This type confusion bug in Chrome's V8 engine was reported by researcher Salvatore Gulizia on August 4, 2026.
Google Patches Actively Exploited Chrome V8 Zero-Day Flaw
Google just patched a high-severity Chrome zero-day flaw that's being actively exploited - a type confusion vulnerability in V8 that could let hackers run malicious code inside the browser's sandbox. This critical update brings Chrome's version up to 152.0.7977.82, so make sure you've got the latest version installed!