CVE-2026-85044: Google Chrome

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

Affected products

• Google Chrome: before 152.0.7977.82 (fixed in 152.0.7977.82)

Published 2026-09-03. Last modified 2026-09-08.