Chrome/Edge spawning LOLBin post-CVE-2026-85046 exploitation

Ankit Mehta@Secvyn

•updated Sep 8, 2026•6•0•11

Detects anomalous child process execution by Chromium-based browsers (e.g., chrome.exe, msedge.exe, brave.exe). This behavior is indicative of potential exploitation of browser vulnerabilities such as CVE-2026-85046, where a memory corruption vulnerability is leveraged to escape the browser sandbox and execute arbitrary commands via interpreters like cmd.exe or powershell.exe.