Google issues Chrome update to fix eighth Zero-Day vulnerability of 2026
The security patch addresses nine vulnerabilities, including one high-severity flaw being actively exploited by hackers.
Google has released a new update for the Chrome browser to fix nine security vulnerabilities, according to Prabhat Khabar. One of these flaws is a Zero-Day vulnerability that is being actively used in real-world cyber attacks.
The specific flaw, identified as CVE-2026-125350, is a Use-After-Free bug within the Chrome XML component. Google has categorised this issue as high severity, though a CVSS score has not been provided.
An unknown security researcher reported the vulnerability on November 6, 2026, and Google announced the update on November 9. While Google stated that an exploit for CVE-2026-125350 exists in real-world attacks, the company has not made the attack methods, the number of affected users, or the identity of the attackers public.
The update also addresses eight other vulnerabilities, including six high severity and two medium severity issues. These involve components such as WebGL, FileSystem, GPU, and V8.
New versions are available for Windows, macOS, and Linux. Google stated that these updates will reach all users in the coming days and weeks through a phased rollout.
Users of browsers such as Microsoft Edge, Brave, Opera, and Vivaldi are advised to check for official updates from their respective providers.