Security AlertCritical
Google patches eighth actively exploited Chrome zero-day this year
Nov 10, 2026 · Summarized by Fundy Tech from 3 sources
The 30-second version
Google released an emergency Chrome update for CVE-2026-125350, a use-after-free bug already exploited in the wild. Chrome users should update now.
Key points
- Google fixed nine Chrome vulnerabilities, including one under active exploitation.
- CVE-2026-125350 affects Chrome’s XML component.
- Updates are rolling out for Windows, macOS and Linux.
Why it matters
If you use Chrome for banking, shopping or work, this patch closes a flaw attackers are already using. Delaying updates leaves your browser exposed until the fix installs.
Who’s affected: Chrome users on Windows, macOS and Linux
What to do
- Update Chrome now.
- Relaunch the browser after updating.
- Apply Chromium-based browser fixes when available.
Vulnerability IDs
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.