Chrome's eighth exploited zero-day of 2026 is patched, so update now

[Gaz_82]

Chrome users should make sure their browser is up to date. The Register reports that Google has fixed CVE-2026-125350, a high severity use after free flaw in Chrome's XML component, and Google said it is aware that an exploit for the bug exists in the wild

The flaw was reported anonymously on 6 November and fixed in Chrome 157.0.8103.50 and .51 for Windows and macOS, and 157.0.8103.50 for Linux. The advisory went out on Monday 9 November

It is the eighth exploited Chrome zero day of 2026, equalling the total for the whole of 2025 with nearly two months still to go. The update also fixes eight other bugs, including flaws in WebGL, FileSystem, GPU, Compositing and V8

A second XML use after free bug, CVE-2026-125346, reported by Arni Hardarson of Neonix, is not known to be exploited. There are no details on attackers or targets, and while the update rolls out over days and weeks, users can force it through Settings and About Chrome

Browsers are one of the biggest targets for attackers, so these regular patches matter. Restarting Chrome to install updates only takes a moment and closes known holes. Matching last year's total by November shows how busy attackers have been

Do you let Chrome update automatically or check manually? And which browser do you trust most for security?

Chrome zero-day whack-a-mole continues as 2026 tally hits 8www.theregister.com