Skip to content
Brief Security & Trust ·

Google fixes Chrome flaw already used in attacks, its eighth this year

The update patches nine Chrome security flaws, one of which attackers are already exploiting.

In brief
  • Google's Chrome update fixes nine flaws, and one of them is already being used in attacks. It is the eighth such Chrome flaw this year, The Hacker News reported.
  • Google has not said how the flaw is abused or by whom. Chrome users should update and relaunch the browser.

The Hacker News reported that Google released Chrome updates on Monday that fix nine security flaws. Google says one of them is already being used in real attacks. It is tracked as CVE-2026-125350 and rated high severity. It is a use-after-free bug in Chrome's XML component, meaning a program touches memory after it was released. An anonymous researcher reported it on November 6, 2026. The outlet counts it as the eighth Chrome flaw exploited before a fix this year.

Google said it knows an exploit exists in the wild. It has not said how attackers use it or who is behind it. The flaw has no severity score yet. Google also said bug details may stay restricted until most users have updated. The fixed versions are 157.0.8103.50 or .51 for Windows and macOS, and 157.0.8103.50 for Linux, according to The Hacker News. Users can check under More, Help, About Google Chrome, then choose Relaunch.

Teams that manage Chrome on staff computers should confirm the new version is installed. The Hacker News also advised users of other Chromium-based browsers, including Edge, Brave, Opera and Vivaldi, to apply the fix once their vendors ship it.

A WebPulse Brief: a short report of an important event, written by the WebPulse Newsroom with AI assistance and checked against the reporting below. When there is more to explain, we follow up with a full story. How we use AI.

Reporting: Google, Zero Day Initiative.