Summary

Google patched nine Chrome flaws, including a V8 vulnerability tracked as CVE-2026-125350, that attackers have been actively exploiting in the wild. Google has addressed multiple security vulnerabilities, one of which, tracked as CVE-2026-125350, has been actively exploited in the wild. The vulnerability is a use after free issue that resides in XML and was reported […]

For more information, read the full story at the original source: Security Affairs ↗

Vulnerabilities in this story

• CVE-2026-11645 KEV · fix by 2026-06-23 Google Chrome EPSS 2.4% 8.8High
• CVE-2026-2441 KEV · fix by 2026-03-10 Google Chrome EPSS 54.4% 8.8High
• CVE-2026-3909 KEV · fix by 2026-03-27 Google Chrome EPSS 2.3% 8.8High
• CVE-2026-3910 KEV · fix by 2026-03-27 Google Chrome EPSS 2.6% 8.8High
• CVE-2026-5281 KEV · fix by 2026-04-15 Google Chrome EPSS 13.7% 8.8High
• CVE-2026-85046 KEV · fix by 2026-09-18 Google Chrome EPSS 1.8% 8.8High
• CVE-2026-87491 KEV · fix by 2026-09-23 Google Chrome EPSS 3.5% 8.8High

Also reported by

• The Hacker News: Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026 ↗
• SecurityWeek: Chrome Update Patches Exploited XML Zero-Day, Eighth This Year ↗
• BleepingComputer: Google patches eighth Chrome zero-day exploited in attacks this year ↗