---
id: 10092
title: "[CVE-2026-85046] Mind the (Patch) Gap, Part 2: Fake Websites Used to Deploy Chrome & Windows 0-Day Exploits"
cve: CVE-2026-85046
source_domain: volexity.com
source_url: "https://www.volexity.com/blog/2026/09/21/mind-the-patch-gap-part-2-fake-websites-used-to-deploy-chrome-windows-0-day-exploits/"
published_at: "2026-09-21T21:01:46Z"
tags: ["zero-day", "vulnerability-research", "threat-intelligence", "apt", "exploit", "vulnerability", "china", "google-chrome", "uta0565", "cleangulp"]
phying_url: "https://phying.com/item/10092"
lang: en
---

# [CVE-2026-85046] Mind the (Patch) Gap, Part 2: Fake Websites Used to Deploy Chrome & Windows 0-Day Exploits

## Summary

On September 9, 2026, Volexity published a blog post detailing the simultaneous use of multiple chained zero-day exploits in Google Chrome (CVE-2026-85046, CVE-2026-87491) and Microsoft Windows (CVE-2026-85880) by two different Chinese advanced persistent threat (APT) actors. Shortly after that blog post was published, Volexity discovered additional campaigns—this time from a third Chinese threat actor, tracked by Volexity under the alias UTA0565—that used the same chained exploits on September 3-4, 2026, while the vulnerabilities were still unpatched. Notably, this threat actor’s campaigns differed from previously documented attacks by using multiple fake websites to deceive victims.

## Intelligence Metadata

- **Sources:** volexity.com
- **CVE:** CVE-2026-85046
- **Published:** 2026-09-21T21:01:46Z
- **Original:** https://www.volexity.com/blog/2026/09/21/mind-the-patch-gap-part-2-fake-websites-used-to-deploy-chrome-windows-0-day-exploits/
- **Phying News:** https://phying.com/item/10092