Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day

Google released Chrome updates on Monday to patch nine security vulnerabilities, including CVE-2026-125350, a high-severity use-after-free bug in the XML component that is under active exploitation in the wild. An anonymous security researcher was credited with discovering and reporting the flaw on November 6, 2026. Google said it is aware that an exploit for the bug exists but has not disclosed how it is being abused or who is behind the attacks. With this update, Google has addressed eight actively exploited Chrome zero-days since the start of the year, and users are advised to update to version 157.0.8103.50 or later.