{"slug": "this-actively-exploited-chrome-vulnerability-is-putting-your-browser-at-risk", "title": "This Actively Exploited Chrome Vulnerability Is Putting Your Browser at Risk", "summary": "Google released a Chrome update on Monday patching nine security flaws, including CVE-2026-125350, a use-after-free bug in Chrome's XML component that Google confirmed has an active exploit in the wild, as reported by The Hacker News. The flaw is the eighth actively exploited Chrome vulnerability of 2026, and Google says users should be running at least versions 157.0.8103.50/.51 on Mac or PC, or 157.0.8103.50 on Linux. Chromium-based browsers such as Microsoft Edge, Opera and Brave are also affected but may not have the patch yet.", "body_md": "If you've seen an uptick in security updates as of late, [you're not alone](https://lifehacker.com/tech/why-microsoft-patch-tuesday-updates-have-so-many-fixes-now). AI models have become *very* good at finding new security vulnerabilities throughout 2026. Researchers and hackers alike are increasingly relying on these models in their individual pursuits: Hackers want to find these flaws to exploit them, while researchers want to block hackers from doing so. Microsoft's latest Patch Tuesday update [included more than 1,400 patches](https://lifehacker.com/tech/your-pc-has-over-1400-known-security-flaws-heres-how-to-fix-them); meanwhile, Apple's latest security update [fixed two iMessage flaws](https://lifehacker.com/tech/update-your-iphone-to-prevent-people-from-seeing-imessages-they-shouldnt) that let both bad actors and innocent parties alike access texts they shouldn't.  \n\nWhether you use a Mac or a PC, you probably browse the web with Chrome, or a Chromium-based browser. As it happens, Google's web browsing platform is the latest to receive an important security update—but it's far from the first important Chrome update of the year.\n\n## Google just patched its eighth actively exploited Chrome flaw of 2026\n\n[As reported by The Hacker News](https://thehackernews.com/2026/11/google-issues-chrome-security-update.html), Google released a new update for Chrome on Monday that patches nine security flaws. While all vulnerabilities are important to patch, one in particular is more serious than the rest: CVE-2026-125350, a use-after-free bug in Chrome's XML component. \n\nUse-after-free vulnerabilities happen when the system frees up a memory location, but a program tries to access it anyway. It's a glitch in programming, but it offers bad actors an opportunity to break into your system. At worst, it allows arbitrary code execution, or, in other words, gives hackers the ability to run their own code in the app or system.\n\nThat's bad enough on the surface, but, unfortunately, Google confirmed that CVE-2026-125350 has an active exploit in the wild. The company is keeping other details close to the vest, but it's dangerous nonetheless. At least someone, somewhere, has used this flaw against a target, which puts all Chrome users (as well as users of Chromium-based browsers) at risk.\n\nWhat's more, this isn't Chrome's first active exploit of the year—this is its *eighth*. The company is playing catch-up with hackers looking to target users of its browser, which makes sense, seeing as [Chrome is by far the world's most popular browser](https://gs.statcounter.com/browser-market-share).\n\n## How to patch this latest Chrome flaw\n\nIf you're using Chrome on your computer, you'll want to update it as soon as possible. Make sure you're running at least versions 157.0.8103.50/.51 on Mac or PC, or 157.0.8103.50 on Linux. To check, click the three dots in the top-right corner of your Chrome window, then go to **More > Help > About Google Chrome**.  \n\nOther Chromium-based browsers may not have the update yet, but they are affected by this flaw. If you use browsers like Microsoft Edge, Opera, or Brave, keep an eye on your updates to install any of the latest patches.", "url": "https://wpnews.pro/news/this-actively-exploited-chrome-vulnerability-is-putting-your-browser-at-risk", "canonical_source": "https://lifehacker.com/tech/this-actively-exploited-security-vulnerability-is-putting-your-chrome-browser?utm_medium=RSS", "published_at": "2026-11-10 20:00:00+00:00", "updated_at": "2026-11-10 20:53:36.362166+00:00", "lang": "en", "topics": ["artificial-intelligence"], "entities": ["Google", "Chrome", "CVE-2026-125350", "The Hacker News", "Microsoft Edge", "Opera", "Brave", "Microsoft"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/this-actively-exploited-chrome-vulnerability-is-putting-your-browser-at-risk", "markdown": "https://wpnews.pro/news/this-actively-exploited-chrome-vulnerability-is-putting-your-browser-at-risk.md", "text": "https://wpnews.pro/news/this-actively-exploited-chrome-vulnerability-is-putting-your-browser-at-risk.txt", "jsonld": "https://wpnews.pro/news/this-actively-exploited-chrome-vulnerability-is-putting-your-browser-at-risk.jsonld"}}