Google just patched an actively exploited zero-day in its Chrome browser that let hackers remotely run code on your machine, proving the tech giant’s massive surveillance apparatus is also an insecure one.
If Google can’t secure the very browser it uses to monitor every click of billions of users, why should any American trust the company with their data? This isn't a glitch in the system; it's a feature of concentrated power. The Hacker News reported this is the sixth actively exploited Chrome zero-day Google has addressed this year. The same company that builds detailed profiles on your life can't even keep the front door locked.
The flaw, tracked as CVE-2026-85046, is a high-severity "type confusion" bug in Chrome's V8 JavaScript engine. As described by CVE.org, the vulnerability "allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page." In plain terms, the engine gets tricked into mishandling memory types, allowing a malicious script to bypass Chrome's security sandbox. You visit the wrong webpage, and an attacker compromises your system.
Google confirmed that an "exploit for CVE-2026-85046 exists in the wild," but is withholding details about the attacks. Security researcher Salvatore Gulizia discovered and reported the flaw. His reward for exposing a vulnerability threatening billions of people? A paltry $1,000 bug bounty. Hot Hardware noted Chrome accounts for over 73% of the desktop browser market. Google rakes in billions vacuuming up and monetizing user data, yet pays pennies to the researchers who actually keep the code safe.
Forbes framed the patch as "good news," claiming the update makes Chrome "safe to use." But there is no safety in a browser that serves as a constant target for hackers and a vacuum for your data. The patch updates Chrome to version 152.0.7977.82/.83 for Windows and Mac, and 152.0.7977.82 for Linux. If you use Chromium-based browsers like Brave or Edge, patch those too.
Don't wait for Google to protect you. Update manually now: click the three vertical dots, navigate to Help > About Google Chrome, and relaunch.
The surveillance state is also the insecure state. Big Tech wants the keys to your digital life, but they can't even secure their own house.
