Security · High impactFan score 65 · Tier A3 sources
Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026
The Hacker News ·
The Brief · written from 3 sources
- Google released emergency Chrome updates patching nine vulnerabilities, including one high-severity use-after-free in the XML component.
- The flaw, CVE-2026-125350, was reported anonymously on November 6 and is already exploited in attacks.
- It is the eighth Chrome zero-day exploited in attacks in 2026.
Why it matters
Chrome is exposed to an actively exploited flaw until the browser is updated, so unpatched installations remain at risk.
Who’s affected
- Chrome users
What to do
- Update Google Chrome to the latest patched version.
- CVE-2026-125350
- #chrome
- #zero-day
- #browser-security
- #use-after-free
- #vulnerability
Google on Monday released updates to patch nine security vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, assigned the CVE identifier CVE-2026-125350 (CVSS score: N/A), has been described as a use-after-free bug…
Timeline
Vulnerability reported anonymously to Google
Google released emergency Chrome security updates patching the flaw
SecurityWeek
Chrome Update Patches Exploited XML Zero-Day, Eighth This Year
The Hacker News
Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026
BleepingComputer
Google patches eighth Chrome zero-day exploited in attacks this year
Full coverage · 3 sources
- 58 min ago ↗
- 3h ago ↗
The Hacker News
Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026
- 4h ago ↗