The claims are supported by the Hacker News post, but not by the primary source.

Hacker News posted a link to the NVD page for CVE-2026-85046. The item headline reports a Chromium vulnerability.

The headline calls the vulnerability an actively exploited remote code execution in the sandbox. It says the vulnerability affects all versions of Chromium.

Claim check:

  • Hacker News posted a link to the NVD page for CVE-2026-85046. The item headline reports an actively exploited RCE in the sandbox that affects all versions of Chromium. (confirmed only by the carrying publication: evidence; «Actively exploited sandbox RCE in all Chromium versions ( nist.gov )»)

Publications:

Primary sources:

score 73.8 · kind incident · revision 1 · stories st-1xswha0