Skip to content
Google Chrome Security Update Addresses Eighth Vulnerability

Google Chrome Security Update Addresses Eighth Vulnerability

First seen 10 Nov 2026, 07:40 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 10, 2026 at 07:41 UTC
  • •CVE-2026-125350 is a high-severity use-after-free vulnerability actively exploited in the wild.
  • •Google has patched a total of eight actively exploited zero-day vulnerabilities in 2026.
  • •Users are urged to update Chrome to the latest versions to mitigate risks.

On November 6, 2026, Google released a security update for Chrome to address nine vulnerabilities, including CVE-2026-125350, a high-severity use-after-free bug currently. This vulnerability affects the XML component of Chrome and could allow attackers to execute arbitrary code. Google has not disclosed specific details about the exploit or the attackers. Users are urged to update their browsers to versions 157.0.8103.50/.51 for Windows and macOS, and 157.0.8103.50 for Linux. This update marks the eighth actively exploited vulnerability addressed by Google in 2026. Other vulnerabilities patched include CVE-2026-2441, CVE-2026-3909, CVE-2026-3910, CVE-2026-5281, CVE-2026-11645, CVE-2026-85046, and CVE-2026-87491. Users of other Chromium-based browsers are also advised to apply the fixes as they become available.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-02-13
CVE-2026-2441 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-03-12
CVE-2026-3909 published
A high-severity vulnerability in Chrome was published and added to CISA KEV the next day.
Endorlabs
2026-03-12
CVE-2026-3910 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-04-01
CVE-2026-5281 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-06-08
CVE-2026-11645 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-03
CVE-2026-85046 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-09
CVE-2026-87491 published
A high-severity vulnerability was published and added to CISA KEV on the same day.
Endorlabs
2026-11-06
Google announces Chrome security update
Google released an update addressing nine vulnerabilities, including CVE-2026-125350, which is actively exploited.
Thehackernews

More articles in this cluster (2)

Following this threat?

Track CVE-2026-11645 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (15)

1 / 3

Common questions

Which versions of Chrome are affected?
The vulnerability affects Chrome versions prior to 157.0.8103.50/.51 for Windows and macOS, and 157.0.8103.50 for Linux.
Is CVE-2026-125350 being exploited?
Yes, Google confirmed that CVE-2026-125350 is actively exploited in the wild.
What should users do to protect themselves?
Users should update their Chrome browsers to the latest versions immediately to mitigate the risk.