BlueMoon CVE-2026-85046 RCE Chrome renderer process exhibits anomalous child spawn
Detects anomalous child processes spawned by a Chrome renderer process. This behavior is often indicative of exploitation attempts, such as the BlueMoon exploit kit leveraging CVE-2026-85046, where a compromised renderer attempts to escape the sandbox or execute arbitrary code in the host process.
Microsoft Sentinel (KQL)

