Actively exploited sandbox RCE in all Chromium versions: Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) https://nvd.nist.gov/vuln/detail/cve-2026-85046
So you don't even need a JS? just a crafted HTML page? Lmao. So much bloated code running and on top of that now we have an AI generated code. Security is gonna be a nightmare for most people
nixCraft 🐧
npub1es…exjlr
2026-09-05 12:13:55 UTC
Author Public Key
npub1esmepyc8y2l6w03glx325zpjwp5ggvzuhqrg0csfylrevrdejxzsnexjlrPublished at
2026-09-05 12:13:55 UTCEvent JSON
{
"id": "e569795bdf1cfb7f74de801d14e7001c393d7e6887a69b081743de8e8a7017b1",
"pubkey": "cc3790930722bfa73e28f9a2aa0832706884305cb80687e20927c7960db99185",
"created_at": 1788610435,
"kind": 1,
"tags": [
[
"proxy",
"https://mastodon.social/users/nixCraft/statuses/117218373503659141",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "Actively exploited sandbox RCE in all Chromium versions: Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) https://nvd.nist.gov/vuln/detail/cve-2026-85046\n\nSo you don't even need a JS? just a crafted HTML page? Lmao. So much bloated code running and on top of that now we have an AI generated code. Security is gonna be a nightmare for most people",
"sig": "7ae2b44798b31953dfe5315671198700c09191de10b89cf517dd45a25e138b8a00ae70e80945da46cb43f93257a66f08e7ab62c18b5c0595949923d4f18a77fb"
}