Actively exploited sandbox RCE in all Chromium versions

The National Vulnerability Database has issued a critical alert regarding a remote code execution (RCE) vulnerability affecting all versions of the Chromium browser engine. Identified as CVE-2026-85046, this security flaw allows attackers to bypass the browser's sandbox environment, potentially granting them unauthorized control over the underlying system. Security researchers have confirmed that the vulnerability is currently being actively exploited in the wild, posing a significant risk to users of browsers based on Chromium, including Google Chrome, Microsoft Edge, and Brave. The flaw highlights a severe weakness in the isolation mechanisms designed to protect users from malicious web content. Users are strongly advised to check for and install the latest security patches provided by their respective browser vendors immediately. Organizations are also encouraged to monitor network traffic for indicators of compromise related to this exploit while awaiting further technical guidance from the Chromium project team.