# Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026

Source: [The Hacker News](https://thehackernews.com/2026/11/google-issues-chrome-security-update.html) · 2026-11-10 · Security
Page: https://themorning.dev/story/google-issues-chrome-security-update-for-eighth-actively-exploited-zero-day-of-2-9844bc61915e12db
Kind: security · Impact: high

## In brief

- Google released emergency Chrome updates patching nine vulnerabilities, including one high-severity use-after-free in the XML component.
- The flaw, CVE-2026-125350, was reported anonymously on November 6 and is already exploited in attacks.
- It is the eighth Chrome zero-day exploited in attacks in 2026.

## Why it matters

Chrome is exposed to an actively exploited flaw until the browser is updated, so unpatched installations remain at risk.

## What to do

- Update Google Chrome to the latest patched version.

## CVEs

- CVE-2026-125350

## Timeline

- 2026-11-06: Vulnerability reported anonymously to Google
- 2026-11-10: Google released emergency Chrome security updates patching the flaw

## Coverage

- [Google patches eighth Chrome zero-day exploited in attacks this year](https://www.bleepingcomputer.com/news/security/google-patches-eighth-chrome-zero-day-exploited-in-attacks-this-year/) — BleepingComputer, 2026-11-10
- [Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026](https://thehackernews.com/2026/11/google-issues-chrome-security-update.html) — The Hacker News, 2026-11-10
- [Chrome Update Patches Exploited XML Zero-Day, Eighth This Year](https://www.securityweek.com/chrome-update-patches-exploited-xml-zero-day-eighth-this-year/) — SecurityWeek, 2026-11-10

Tags: chrome, zero-day, browser-security, use-after-free, vulnerability

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev