Security · High impactFan score 65 · Tier A3 sources
Google patches eighth Chrome zero-day exploited in attacks this year
BleepingComputer · By Sergiu Gatlan ·
The Brief · written from 3 sources
- Google released emergency Chrome updates patching nine vulnerabilities, including one high-severity use-after-free in the XML component.
- The flaw, CVE-2026-125350, was reported anonymously on November 6 and is already exploited in attacks.
- It is the eighth Chrome zero-day exploited in attacks in 2026.
Why it matters
Chrome is exposed to an actively exploited flaw until the browser is updated, so unpatched installations remain at risk.
Who’s affected
- Chrome users
What to do
- Update Google Chrome to the latest patched version.
- CVE-2026-125350
- #chrome
- #zero-day
- #browser-security
- #use-after-free
- #vulnerability
Google has released emergency security updates to patch a new Chrome vulnerability exploited in zero-day attacks, the eighth such flaw since the start of the year. [...]
Timeline
Vulnerability reported anonymously to Google
Google released emergency Chrome security updates patching the flaw
SecurityWeek
Chrome Update Patches Exploited XML Zero-Day, Eighth This Year
The Hacker News
Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026
BleepingComputer
Google patches eighth Chrome zero-day exploited in attacks this year