AI Image
Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026
The Hacker News • • general
Key Points:
- Google released updates addressing nine security vulnerabilities in Chrome, including a high-severity use-after-free bug in the XML component (CVE-2026-125350) that is actively exploited in the wild.
- The flaw, reported by an anonymous researcher on November 6, 2026, could allow attackers to cause data corruption, crashes, or execute arbitrary code.
- Google has not disclosed detailed information about the ongoing exploitation or attackers but is restricting access to bug details until most users are updated.
- This update marks the eighth actively exploited Chrome zero-day patched by Google in 2026, highlighting ongoing security challenges.
- Users are urged to update Chrome to version 157.0.8103.50/.51 on Windows, macOS, and Linux, and users of other Chromium-based browsers should apply corresponding fixes promptly.
