Chrome V8 CVE-2026-85046 exploit via driver-html.js sort/fill type confusion

Ankit Mehta@Secvyn

•updated Sep 10, 2026•15•0•25

Detects delivery and execution artifacts associated with the BlueMoon CVE-2026-85046 V8 type-confusion exploit. The rule monitors for known exploit-related file names (e.g., driver-html.js) and characteristic string indicators (e.g., v8ctf_exp_attempt, addrof, fakeobj) across file system, process execution, and network telemetry.