CYBERSECURITYTRACKER
Permanent story citation

Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12873

As cited

Copy frozen at (site build).

vulnerabilities

Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026

Google released a Chrome security update on November 10, 2026, addressing nine vulnerabilities including CVE-2026-125350, a high-severity use-after-free bug in the XML component that is actively exploited in the wild. This marks the eighth zero-day vulnerability Google has patched in Chrome during 2026.

Why it matters: Chrome users need to apply this update immediately to close an actively exploited attack vector; this is the eighth zero-day in Chrome this year, indicating sustained attacker interest in the browser.

VendorsGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026

Google released a Chrome security update on November 10, 2026, addressing nine vulnerabilities including CVE-2026-125350, a high-severity use-after-free bug in the XML component that is actively exploited in the wild. This marks the eighth zero-day vulnerability Google has patched in Chrome during 2026.

Why it matters: Chrome users need to apply this update immediately to close an actively exploited attack vector; this is the eighth zero-day in Chrome this year, indicating sustained attacker interest in the browser.

VendorsGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026

Google released a Chrome security update on November 10, 2026, addressing nine vulnerabilities, including CVE-2026-125350, a use-after-free bug in the XML component that is being actively exploited in the wild. This marks the eighth zero-day vulnerability patched by Google in Chrome during 2026.

Why it matters: Chrome users face active exploitation risk from CVE-2026-125350 and should apply the update immediately to prevent compromise.

VendorsAppleGoogleMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026

Google released Chrome security updates on November 10, 2026, addressing nine vulnerabilities, including CVE-2026-125350, a use-after-free bug in the XML component marked as actively exploited in the wild. This represents the eighth zero-day vulnerability patched in Chrome during 2026.

Why it matters: Chrome users face active exploitation of this vulnerability in the field; practitioners should deploy the update immediately to all systems running the affected browser.

VendorsAppleGoogleMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026

Google released a Chrome security update on November 10, 2026, addressing nine vulnerabilities including CVE-2026-125350, a use-after-free bug in the XML component that is actively exploited in the wild. This marks the eighth zero-day vulnerability patched by Google in Chrome during 2026.

Why it matters: Chrome users face active exploitation of this zero-day; practitioners should deploy the update immediately to all endpoints running the browser.

VendorsAppleGoogleMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026

Google released a Chrome security update on November 10, 2026, addressing nine vulnerabilities including CVE-2026-125350, a use-after-free bug in the XML component that is actively exploited in the wild. This marks the eighth zero-day vulnerability patched by Google in Chrome during 2026.

Why it matters: Chrome users face active exploitation of this zero-day; practitioners should deploy the update immediately to all endpoints running the browser.

VendorsAppleGoogleMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary