Google fixes exploited Chrome XML zero-day CVE-2026-125350
Original title: CVE-2026-125350: Google Fixes Exploited Chrome XML Zero-Day
The captured page is site navigation, so versions, impact details and the Chrome fix are not stated.
SOCRadar’s headline says Google fixed CVE-2026-125350, described as an exploited Chrome XML zero-day. The supplied text is website navigation and does not include the advisory body, affected builds, or remediation steps.
Unconfirmed: Only the headline is available; exploitation scope and the fix are not in the captured text.
- The captured page does not state Chrome versions or a fixed build.
Impact: Exploited Chrome XML zero-day; specific gain not stated.
| Product | Affected |
|---|---|
| Google Chrome | — |
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-125350 | Use-after-free in Chrome XML before 157.0.8103.50 | 8.8 | — | KEVPoC ×3 | KEV |
From the original article
11 min read at socradar.io
Google has patched CVE-2026-125350, a high-severity use-after-free in Chrome’s XML handling that attackers are already exploiting. The fix landed in the Stable channel on November 9, 2026, three days after an anonymous researcher reported the bug. Google says it is aware that an exploit for CVE-2026-125350 exists in the wild.
By Yağmur Ernalbant · socradar.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.