Google confirmed that attackers were exploiting a high-severity Chrome flaw, CVE-2026-85046, in the wild. The September 3, 2026 patch addressed it, but that release is no longer the current Stable desktop update: Google’s October 6 release lists newer versions. Open Chrome’s Help → About Google Chrome and install the latest version offered for your platform, then relaunch if prompted. The available official notices do not verify the headline’s “billions” audience figure.
What happened with the Chrome zero-day?
In its September 3, 2026 desktop Stable release notice, Google identified CVE-2026-85046 as a high-severity type-confusion vulnerability in Chrome’s V8 JavaScript engine. Google said: “Google is aware that an exploit for CVE-2026-85046 exists in the wild.” That confirms exploitation was known to Google; the notice does not identify attackers, describe a campaign, or establish how many people were affected.
Google’s notice does not provide enough public technical detail to explain how an exploit works. The evidence also does not establish the “billions” figure in the headline as an affected-user count.
Which Chrome version should you install?
Do not seek out the September build just because it was the release that announced the CVE fix. Google published a newer desktop Stable update on October 6, 2026. The Canadian Centre for Cyber Security recorded the following version baselines as the versions below which desktop Chrome was affected, as of October 6:
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minute#1 Best Overall
- Attention-grabbing design meets the latest evolution of the Google Pixel Camera on the new Google Pixel 11 Pro; Gemini Intelligence helps manage details so you can live in the moment[1]; and the phone is available in two sizes
- Unlocked Android phone gives you the flexibility to change carriers and choose your own data plan: Works with Google Fi, Verizon, T-Mobile, AT&T, and other major carriers[2]
- Stay informed without looking at your screen: When your phone is face down, Pixel HiLight gently alerts you with subtle glowing lights when your favorite contacts are calling or you’re talking with Gemini; exclusive to Google Pixel 11 Pro phones
- Magic Capture catches the moment as you live it: With just one tap, Pixel 11 Pro captures video and photos, and automatically edits, crops, and unblurs a curated collection, ready to share – and you get the memory of how it felt to be in the moment
- Two new cameras for more brilliant photos: A larger telephoto sensor captures 30% more light for clear, beautiful photos and videos, even in the dark[3]; Pixel’s longest zoom ever helps you capture details from impressive distances[4]
| Platform | September 3 release | October 6 release baseline |
|---|---|---|
| Windows | 152.0.7977.82/.83 | 155.0.8059.39/.40 |
| Mac | 152.0.7977.82/.83 | 155.0.8059.39/.40 |
| Linux | 152.0.7977.82 | 155.0.8059.39 |
Sources: Google’s September 3 release notice, Google’s October 6 release notice, and the Canadian Centre for Cyber Security advisory dated October 7. These are desktop Stable version baselines, not a guarantee that every managed device or release channel receives an update at the same time. Install the latest version Chrome offers for your platform.
How to update Chrome on desktop
- Open Chrome.
- Select the three-dot menu, then choose Help → About Google Chrome.
- Let Chrome check for and install an available update. If Chrome reports that it is up to date, note the displayed version and check again later if it is below the applicable October 6 baseline.
- Select Relaunch if Chrome offers that option. If you do not see a relaunch prompt, close and reopen Chrome after the update.
Google said rollout of the September update would occur over the coming days or weeks, so update availability can vary. Device-management policies can also affect when an update appears. If a work or school device does not offer the latest version, contact its administrator rather than trying to bypass management controls.
Rank #2
- Google Pixel 10a is a durable, everyday phone with more[1]; snap brilliant photography on a simple, powerful camera, get 30+ hours out of a full charge[2], and do more with helpful AI like Gemini[3]
- Unlocked Android phone gives you the flexibility to change carriers and choose your own data plan; it works with Google Fi, Verizon, T-Mobile, AT&T, and other major carriers
- Pixel 10a is sleek and durable, with a super smooth finish, scratch-resistant Corning Gorilla Glass 7i display, and IP68 water and dust protection[4]
- The Actua display with 3,000-nit peak brightness shows up clear as day, even in direct sunlight[5]
- Plan, create, and get more done with help from Gemini, your built-in AI assistant[3]; have it screen spam calls while you focus[6]; chat with Gemini to brainstorm your meal plan[7], or bring your ideas to life with Nano Banana[8]
How to confirm the update took effect
Return to Help → About Google Chrome after relaunching and check the version shown there. Compare it with the October 6 baseline for your operating system in the table above; a newer Stable version is also appropriate. If Chrome still shows an older version, check again later or ask your device administrator whether updates are managed.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What the October release’s security-fix count means
Google’s October 6 desktop release notice says that update includes 247 security fixes. That is Google’s count for fixes in that build—not 247 zero-days and not 247 vulnerabilities known to be exploited in the wild. The October notice identifies other critical issues, but does not say those were exploited.
Updating promptly matters even when a specific exploit is not publicly described. Chromium’s Chrome Security Update FAQ explains that it is impossible to guarantee a fixed vulnerability was never exploited and recommends rolling out the fix. Chromium also notes that attackers may later exploit patched flaws against installations that have not updated.
Quick Recap
Best Value
- Google Pixel 7 is powered by Google Tensor G2; it’s faster, more efficient, and more secure, with the best photo and video quality yet on Pixel[1].Other camera description:Front,Rear.Bluetooth Version 5.2 with dual antennas for enhanced quality and connection.
- Unlocked Android 5G phone gives you the flexibility to change carriers and choose your own data plan[2]; works with Google Fi, Verizon, T-Mobile, AT&T, and other major carriers
- Pixel’s Adaptive Battery can last over 24 hours; when Extreme Battery Saver is turned on, it can last up to 72 hours[3]
- The 6.3-inch Pixel 7 display is super sharp, with rich, vivid colors; it’s fast and responsive for smoother gaming, scrolling, and moving between apps[4]
- Google Pixel 7 has wide and ultrawide lenses with up to 8x Super Res Zoom[5]; and Cinematic Blur brings more drama to your videos
Rank #4
- Google Pixel 10 Pro is the ultimate Pixel experience, featuring advanced AI with Gemini, unbelievable camera quality, impeccable design in two sizes, and the next-gen Google Tensor G5 chip[1]
- Unlocked Android phone gives you the flexibility to change carriers and choose your own data plan[2]; it works - Google Fi, Verizon, T-Mobile, AT&T, and other major carriers
- Get a head start on syncing your data before it even arrives: After you purchase your new Pixel, look for an email that explains how to transfer your photos, videos, passwords, and more in just a few quick steps[11]
- Pixel’s pro camera system makes everything look amazing, even in low light; capture more of the scene with advanced Google AI models, and bring out incredible details with 100x Pro Res Zoom, stunning 50 MP images, and super steady videos in 8K[10]
- Pixel 10 Pro is built with durable aluminum and Corning Gorilla Glass Victus 2 for scratch and drop resistance; the 6.3-inch Super Actua display with 3,300-nit peak brightness is easy on the eyes, even in direct sunlight[3,13,18]
What is not established about this incident
- The official September notice confirms in-the-wild exploitation, but does not name an attacker or describe the exploit’s mechanics.
- The reviewed official notices do not state a victim count or verify that billions of users were affected.
- A separate Singapore advisory from April 2026 concerned CVE-2026-5281 in Dawn/WebGPU. It is a different vulnerability and does not provide evidence about CVE-2026-85046.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
