CVE-2026-85045Disclosure(google / chrome)

三步攻击链（补丁已推送）： ① V8 内存漏洞 → 控制引擎沙箱内内存 ② WebP 解码器 CVE-2026-85045 → 逃出内置沙箱 ③ Crashpad 崩溃处理器 CVE-2026-78952 → 沙箱外完整代码执行 访问一个错误的网页就中招，无需下载，无需点击任何链接。

Afecta a TODOS los navegadores basados en Chromium: Chrome, Edge, Brave, Arc, Opera. Y a cualquier app de Electron que use esa base. También hay una V8 race condition (CVE-2026-85045) y un WebGL OOB write (CVE-2026-85050). En total son 12 CVEs en este batch.

TRC analysis shows AI-assisted vulnerability research enabled a full Chrome exploit chain development in just 6 days. XBOW researchers chained three zero-days (CVE-2026-85045, CVE-2026-78952) to achieve system-level compromise through malicious webpages, affecting 1 billion users. #ZeroDay #ThreatIntel 🔗 Full breakdown: https://aviatrix.ai/threat-research-center/xbow-openai-chrome-exploit-cve-2026-85045-2026

#NØØT_Security_Alerts 🚨 #ALERT — GOOGLE CHROME: AI-ASSISTED EXPLOIT CHAIN ACHIEVES FULL SANDBOX ESCAPE ON WINDOWS October 13, 2026 DISCLOSED BY: XBOW Security Research PRODUCT: Google Chrome for Windows CVE: CVE-2026-85045 — V8 vulnerability. CVE-2026-78952 — Crashpad vulnerability. Chromium issue 548509153 — Animated WebP decoder vulnerability. AFFECTED VERSIONS: Older vulnerable Chrome builds lacking the relevant August–September 2026 security fixes. Google confirms all three vulnerabilities have been fixed. IMPACT: Researchers demonstrated a three-stage exploit that crosses Chrome’s security boundaries and executes code outside the browser sandbox. Attack chain: V8 Maglev memory corruption → Animated WebP decoder memory corruption → Crashpad sandbox escape. The demonstrated attack required only loading a crafted webpage. No additional download or click was needed. EXPLOITATION STATUS: CONFIRMED LABORATORY FULL-CHAIN EXPLOIT. Google reproduced the research and awarded XBOW $250,000. No confirmed malicious in-the-wild exploitation of this chain. AI RESEARCH: Human researchers collaborating with GPT-5.6 Sol-powered agents developed the exploit in six days. Forensic triage: Investigate abnormal Chrome/Crashpad crashes, unexpected child processes and suspicious execution following webpage visits. No campaign-specific IOCs published. URGENT ACTION: Update Chrome to the latest stable release and restart the browser. Verify browser versions across managed endpoints. SOURCE: https://xbow.com/labs/research/zero-to-calc-in-six-days-inside-xbow-chrome-full-chain GOOGLE: https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html CONFIDENCE: HIGH — First-party exploit research, Google security advisories and confirmed laboratory demonstration. #CyberSecurity #ThreatIntel #GoogleChrome #BrowserSecurity #AIResearch #SandboxEscape

XBOW: 6 days + $40K compute → 3 Chrome zero-days chained into full sandbox escape. Google paid $250K bounty. Chain: V8 bug + CVE-2026-85045 (WebP) + CVE-2026-78952 (Crashpad) ~1B Windows users exposed. AI just made exploit research industrial-scale.

CVE-2026-85045 Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium… https://www.cve.org/CVERecord?id=CVE-2026-85045