Google released security updates to address nine vulnerabilities impacting the Chrome browser. One of these vulnerabilities, tracked as CVE-2026-125350, is being exploited in the wild. This is a use-after-free flaw affecting the XML component.
Google Chrome Patches Eighth Zero-day Vulnerability of the Year (CVE-2026-125350)
About this summary. This is a short excerpt from the description that Qualys published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://threatprotect.qualys.com/2026/11/10/google-chrome-patches-eighth-zero-day-vulnerability-of-the-year-cve-2026-125350/
Source attribution: headline and facts are from Qualys (threatprotect.qualys.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
CVE-2026-125350: Google Fixes Exploited Chrome XML Zero-Day
Google has patched CVE-2026-125350, a high-severity use-after-free in Chrome’s XML handling that attackers are already exploiting. The fix landed in the Stable channel…
Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026
Google on Monday released updates to patch nine security vulnerabilities, including one that has come under active exploitation in the wild. The high-severity…
Update Chrome now to fix a flaw attackers are exploiting
On November 9, Google issued a security update to Chrome’s Stable channel for Windows, Mac, and Linux. The update is rolling out over the coming days and weeks. Most…
Google patches eighth Chrome zero-day exploited in attacks this year
Google has released emergency security updates to patch a new Chrome vulnerability exploited in zero-day attacks, the eighth such flaw since the start of the year.
Microsoft Fixes Nearly 1,100 Security Vulnerabilities
Microsoft did another four-digit patch drop today, releasing updates to fix almost 1,100 security vulnerabilities in its Windows operating systems and supported…
Google fixes the eighth actively exploited Chrome zero-day of 2026
Google patched nine Chrome flaws, including a V8 vulnerability tracked as CVE-2026-125350, that attackers have been actively exploiting in the wild. Google has addressed…