Google Patches Eighth Actively Exploited Chrome Zero-Day CVE-2026-125350 of 2026
Google released updates addressing nine vulnerabilities in Chrome, including one actively exploited zero-day tracked as CVE-2026-125350. The flaw is a use-after-free issue in the XML component that can lead to data corruption, crashes, or arbitrary code execution. An anonymous researcher reported the bug on November 6, 2026, and Google confirmed in-the-wild exploitation without disclosing attacker details. This marks the eighth actively exploited Chrome zero-day patched by Google since the beginning of 2026. Affected users should immediately update to Chrome version 157.0.8103.50 or later on Windows, macOS, and Linux. Other Chromium-based browsers including Microsoft Edge, Brave, Opera, and Vivaldi are also urged to apply equivalent fixes promptly.
The Hacker NewsNov 10, 2026Translated from English