CVE Tools

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

The Hacker NewsBy The Hacker News

Reported exploitedChromeUTA0565Windows

Our summary

Chinese-linked actor UTA0565 used fake websites to exploit a zero-day chain affecting Google Chrome and Microsoft Windows: CVE-2026-85046, CVE-2026-87491, and CVE-2026-85880. The flaws enabled a browser sandbox escape and remote code execution, delivering the CLEANGULP malware, which can run commands, manage files, inspect processes, and execute BOF payloads.

Read at The Hacker News

The Hacker News publishes this story on its own site; we link to it rather than reprint it.

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store