Google fixes the eighth actively exploited Chrome zero-day of 2026

Source: Security Affairs

Read original source

At a glance

Google patched nine Chrome flaws, including a V8 vulnerability tracked as CVE-2026-125350, that attackers have been actively exploiting in the wild. Google has addressed multiple security vulnerabilities, one of which, tracked as CVE-2026-125350, has been actively exploited in the wild. The vulnerability is a use after free issue that resides in XML and was reported by an anonymous source on November 6, 2026.. “Google is aware that an exploit for CVE-2026-125350 exists in the wild.” reads the advisory . A Use-after-free (UAF) is a memory corruption vulnerability that occurs when a…

CVE references