Cybersecurity · 2 views
Chrome Update Patches Exploited XML Zero-Day, Eighth This Year
The high-severity use-after-free in Chrome’s XML component was reported anonymously on November 6 and is already exploited in attacks.
AI Summary
Google released a Chrome update on Monday that patches nine vulnerabilities, including a high‑severity, exploited use‑after‑free flaw in the browser’s XML component (CVE‑2026‑125350). The zero‑day was reported anonymously on November 6 and is already being used in attacks, though details of the exploitation remain undisclosed. This marks the eighth Chrome zero‑day exploited in 2026, following seven previously identified CVEs. In addition to the XML fix, the update also addresses six other high‑severity issues across WebGL, FileSystem, Compositing, GPU, V8 and XML components.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedCoverage Context
More from Cybersecurity
Continue reading recent Cybersecurity coverage
- Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026Continue reading
- SonicWall releases patches for 7 flaws in its firewalls, most involving unauthenticated accessContinue reading
- Vanderbilt University hit in BYOD ransomware attack, data theft claimedContinue reading
- CISA Announces Enhanced Reporting Form for Cyber IncidentsContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow