Vulnerability record

CVE-2026-85043

Watch this CVEFree account

CriticalNo known exploitation

Patch status

Official fix available since Oct 7, 2026

Apply the vendor's update to every affected system. Check the fixed-in versions below where known.

Basis: Google Chrome Releases vendor advisory

Patch or advisory on chromereleases.googleblog.com (opens in a new tab)

Description

Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: High)

Source: NIST National Vulnerability Database. Official vulnerability data, reproduced as published.

Affected products

Products affected by this vulnerability, with versions and the source of each entry
Product	Vendor	Affected versions	Fixed in	Source
Chrome	Google	< 152.0.7977.82	152.0.7977.82	NVD

Sources: NVD = NIST National Vulnerability Database.

Intelligence timeline

Developments from the last 30 days, newest first.

CVSS scoredUpdateOct 7, 2026
CVE-2026-85043 scored CVSS 9.1
Basis: NIST National Vulnerability Database

Coverage

CriticalPatch

Long Term Support Channel Update for ChromeOS

Patch

Apply the vendor's security update for the affected products.

Google Chrome Releases5 hours agoSecurity pros

References

chromereleases.googleblog.com https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html
issues.chromium.org https://issues.chromium.org/issues/533502257