Zero-day CSS: CVE-2026-2441 exists in the wild

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CVE-2026-2441: Zero-Day CSS Vulnerability in Chromium-Based Browsers CVE-2026-2441 is a zero-day CSS vulnerability affecting all Chromium-based browsers, allowing attackers to exploit a use-after-free condition in the Blink rendering engine. This vulnerability enables the theft of sensitive DOM content without executing JavaScript, posing risks to user security. The vulnerability was actively exploited in the wild, prompting urgent attention from developers and security teams. 3 sources 91