Chrome Urgent Update Patches Eighth Exploited Zero-Day This Year

Google has released an emergency Chrome update patching nine security vulnerabilities, including a high-severity zero-day actively being exploited by attackers. The flaw, tracked as CVE-2026-125350, is a use-after-free bug in the browser's XML component that was reported anonymously on November 6. This marks the eighth Chrome zero-day exploited in the wild this year alone, continuing a concerning pattern of frequent browser attacks.

The update to Chrome version 157.0.8103.50/.51 for Windows/Mac and 157.0.8103.50 for Linux also fixes six other high-severity vulnerabilities in WebGL, FileSystem, Compositing, GPU, V8, and XML components. While Google hasn't shared attack specifics, the active exploitation means users should update immediately. This ongoing stream of Chrome zero-days highlights the browser's constant security challenges and the importance of prompt patching.