Chrome Update Patches Exploited XML Zero-Day, Eighth This Year
Source SecurityWeek
Mentioned vulnerabilities
Fixed in 157.0.8103.50 : patch affected systems soon.
Data as of 10 Nov 2026, 06:18 UTC
Rated High by SecurityWeek
- Patch
- Available – fixed in 157.0.8103.50
What to do
AI-suggested
Users should update Google Chrome to version 157.0.8103.50 or later on Linux, and 157.0.8103.50/.51 or later on Windows and Mac to mitigate this vulnerability. Google has released official patches addressing this zero-day and other vulnerabilities in these versions. Applying these updates promptly is the recommended remediation.
Description
A high-severity use-after-free vulnerability (CVE-2026-125350) in the XML component of Google Chrome was reported anonymously on November 6, 2026, and is already exploited in the wild. This zero-day is one of eight exploited Chrome zero-days patched in 2026. The vulnerability is addressed in Chrome 157.0.8103.50/.51 for Windows and Mac, and 157.0.8103.50 for Linux. Google has not disclosed technical details or attack specifics. Additional high- and medium-severity vulnerabilities were also fixed in this update.