Restart your browser. That is the whole instruction, and that is exactly why we skip it.
Google writes that the update will reach people over the coming days and weeks. For a flaw already in use, weeks is a long time. Do not wait for it to arrive on its own.
Fact
The facts: on 3 September 2026 Google updated Chrome's Stable channel to 152.0.7977.82/.83 for Windows and Mac and 152.0.7977.82 for Linux, with 12 security fixes; the update rolls out over the coming days and weeks. For CVE-2026-85046, a type confusion in V8, rated high and reported on 4 August 2026 by Salvatore Gulizia, Google says it is aware that an exploit exists in the wild. On 4 September CISA added the vulnerability to the Known Exploited Vulnerabilities catalogue with a federal deadline of 18 September, noting that it allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page and could affect other Chromium-based browsers, including Google Chrome, Microsoft Edge and Opera.
The important part is further down in CISA's text: the code runs inside the sandbox. By that description, this flaw alone does not get out of the sandbox to the operating system. The bug details, however, may stay restricted until most people have updated, and Google says so explicitly.
The update arrives by itself. The restart does not.
Open Settings, then About Chrome, and check that the version is 152.0.7977.82 or higher. In Edge and Opera check their menus the same way for a pending update. Two minutes.
Sources
Chrome Releases - Stable Channel Update for Desktop, 03.09.2026CISA - Known Exploited Vulnerabilities CatalogThe visual is generated code-art, no third-party images.