# Chrome Update Patches Exploited XML Zero-Day, Eighth This Year

Source: [SecurityWeek](https://www.securityweek.com/chrome-update-patches-exploited-xml-zero-day-eighth-this-year/) · 2026-11-10 · Security
Page: https://themorning.dev/story/chrome-update-patches-exploited-xml-zero-day-eighth-this-year-61f253ac4386a7fa
Kind: security · Impact: high

## In brief

- Google patched a high-severity use-after-free bug in Chrome's XML component.
- The flaw was reported anonymously on November 6 and is already being exploited in attacks.
- SecurityWeek describes it as the eighth Chrome zero-day this year.

## Why it matters

An actively exploited browser flaw puts any unpatched Chrome installation at risk, so developers and their machines should update promptly.

## What to do

- Update Chrome to the patched version.

## Timeline

- 2026-11-06: Vulnerability reported anonymously

## Coverage

- [Chrome Update Patches Exploited XML Zero-Day, Eighth This Year](https://www.securityweek.com/chrome-update-patches-exploited-xml-zero-day-eighth-this-year/) — SecurityWeek, 2026-11-10

Tags: chrome, security, zero-day, browser, use-after-free, xml

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev