Google patches Chrome for its eighth actively exploited zero-day of 2026
Google released updates to fix nine Chrome vulnerabilities, including CVE-2026-125350, a use-after-free flaw in the XML component that the company says is already being exploited in the wild. An anonymous security researcher reported the flaw on November 6, 2026. With this patch, Google has addressed eight actively exploited Chrome zero-days so far this year. The fixed versions are 157.0.8103.50/.51 for Windows and macOS, and 157.0.8103.50 for Linux.
In 30 seconds
- Google patched nine Chrome flaws, including the CVE-2026-125350 zero-day in the XML component
- The company acknowledges an exploit for that vulnerability exists in the wild
- It is the eighth actively exploited Chrome zero-day of 2026
IASummary generated by artificial intelligence from a story by The Hacker News. It may contain errors: the original source prevails.





Comments
Be respectful. Comments reported by several people are hidden until a moderator reviews them.
You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.