# Google patches eighth actively exploited Chrome flaw of 2026

- URL: https://talkfuse.com/story/chrome-zero-day-whack-a-mole-continues-as-2026-tally-hits-8/
- Published: 2026-11-10T13:28:00+00:00
- Updated: 2026-11-10T13:51:07+00:00
- Original publisher: The Register
- Original article: https://www.theregister.com/security/2026/11/10/chrome-zero-day-whack-a-mole-continues-as-2026-tally-hits-8/5308732
- Topics: Software

## Key points

- Chrome’s 2026 zero-day count has reached eight.
- Attackers are exploiting a newly patched XML memory flaw.
- Google is rolling out fixes across Windows, macOS and Linux.

## Summary

Google has patched its eighth actively exploited Chrome zero-day of 2026, matching the total for all of 2025 with nearly two months of the year remaining. The flaw, CVE-2026-125350, is a high-severity memory bug in Chrome’s XML component; Google says attackers are exploiting it but has not disclosed who is responsible or who is being targeted.

The vulnerability was reported anonymously on 6 November and is a use-after-free error, which can potentially let attackers corrupt memory and run malicious code. Google has released fixes in Chrome versions 157.0.8103.50/.51 for Windows and macOS, and 157.0.8103.50 for Linux, alongside fixes for eight other security issues. It is withholding further technical details until more users install the update; users can check for it in Chrome’s About Chrome settings.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.