CVE-2026-125350: Google Fixes Exploited Chrome XML Zero-Day

Reported by SOCRadar (Yağmur Ernalbant)

Summary by Cyber Security News11 Nov 2026, 12:42 CET

About this summary. This is a short excerpt from the description that SOCRadar published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://socradar.io/blog/cve-2026-125350-google-chrome-xml-0day/

Google has patched CVE-2026-125350, a high-severity use-after-free in Chrome’s XML handling that attackers are already exploiting. The fix landed in the Stable channel on November 9, 2026, three days after an anonymous researcher reported the bug. Google says it is aware that an exploit for CVE-2026-125350 exists in the wild.

Read the full article at SOCRadar →

Source attribution: headline and facts are from SOCRadar (socradar.io). Summary method: excerpt of the source description. See our source attribution policy.