WORLDTECHGoogle Chrome Zero-Day security flaw Exploited in real attacks
What happened
Google released a Chrome security update that fixes nine vulnerabilities, including a high-severity XML flaw being exploited in the wild. Google is a software and Internet company based in Mountain View, and its products and services include Software tools.
The patched versions are 157.0.8103.50/.51 for Windows and Mac, and 157.0.8103.50 for Linux.
This release follows the earlier Chrome 157 security update , but users must install the newer build to receive these latest fixes. Use-after-free flaws occur when software accesses memory after it releases it.
Tracked as CVE-2026-125350 (the public catalogue number for a specific software flaw), the zero-day (a flaw already being used in attacks before a fix exists) makes this release a priority for Windows, macOS, and Linux users. Google published the update on November 9, 2026.
Chrome CVE/vulnerability Cyber Security News 2 min. Chrome Zero-Day Vulnerability According to Google’s Stable Channel advisory , CVE-2026-125350 is a use-after-free vulnerability in XML, recorded under issue 582442907.
An anonymous researcher reported it on November 6, 2026. Google explicitly stated that an exploit exists in the wild but did not identify attackers, targets, delivery methods, or the exploit’s capabilities.