Google patches exploited Chrome zero-day CVE-2026-125350
Stable builds 157.0.8103.50 and .51 fix a use-after-free in Chrome's XML parser; attack details stay restricted.
Stories per day · 30 days
16 RSS
Relatedgoogle32use-after-free18browser16zero-day11claude7firefox7gemini7safe-browsing7clickfix6xml6certificate-authority5emudhra5safari5sandbox-escape5android4anthropic4memory-corruption4openai4
127 stories, newest first · one card per story
Stories tagged #chrome
Chrome patches exploited XML use-after-free zero-day CVE-2026-125350
The XML use-after-free is Chrome’s eighth zero-day this year; CISA wants users patched before November 24.
Microsoft patches nearly 1,100 flaws, including exploited Outlook bug
CVE-2026-124194 is the only flaw Microsoft says is already exploited; 63 of this month's fixes are rated critical.
Google patches in-the-wild Chrome XML zero-day CVE-2026-125350
Stable builds 157.0.8103.50 and .51 close nine flaws; Google has not confirmed code execution or named attackers.
Google fixes exploited Chrome XML use-after-free zero-day CVE-2026-125350
Stable builds 157.0.8103.50/.51 close the high-severity bug; Google is withholding details until most users update.
Abe Office Malware Injects Into Chrome To Decrypt App-Bound Cookies
The RAT uses browser injection to bypass Chrome's App-Bound Encryption for cookie decryption.
2
Talos details VOLTA, a Windows infostealer that ranks loot with LLMs
The same newsletter repeats claims about Railway agents, freezer attacks in 10 countries, and a Binance theft.
1
Google Chrome 157 Released With 213 Security Fixes
Google Chrome 157 fixes 213 vulnerabilities including 7 critical ones; gradual rollout continues.
Google Chrome security advisory for versions prior to 157.0.8103.38
Google Chrome Stable Channel versions before 157.0.8103.38 on Windows and Mac or 157.0.8103.38 on Linux contain vulnerabilities.
Chrome 157 patches 213 security issues including 7 critical flaws
Chrome 157.0.8103.39 fixes seven critical flaws including memory corruption in ANGLE for Android allowing potential remote code execution.
Google Releases Chrome 157 Fixing 213 Bugs
Chrome 157 fixes 213 security bugs including 7 critical memory safety issues across graphics and browser components, with rollout ongoing.
Chrome 157 Rolls Out With 213 Security Fixes
Google releases Chrome 157 fixing 213 vulnerabilities, seven critical memory safety bugs.
Google security advisory for Stable Channel Chrome
Stable Channel Chrome for Desktop versions prior to 156.0.8078.79/.80 on Windows and Mac, and 156.0.8078.79 on Linux are affected.
Fake PDF and search tools hijacked searches for 13.4 million Chrome users
Socket tied 319 mostly unlisted Chrome Web Store extensions, promoted by ads, to query proxying toward Yahoo or Bing.
1
Unreleased Claude built exploit chains for Chrome, Safari, and major OSes
Anthropic says the model made five exploits, including Android data theft and Linux root code execution; vendors have patched.
OffensiveCon Japan agenda covers Chrome, Telegram and iOS research
October 27–28 session titles name Skia, Telegram stickers and Muse Spark, but list no CVEs, versions or confirmed attacks.
3
Chrome AI autofill can fill forms using Gmail details
Optional US suggestions may include confirmation numbers, membership IDs, addresses, phone numbers, and card numbers.
Google fixes 52 Chrome flaws, including four critical bugs
Stable builds move to 156.0.8078.73/.74 on Windows and Mac and 156.0.8078.73 on Linux, with no exploitation stated.
Chrome 156 and Firefox 159 patch more than 200 flaws
CVE-2026-118306 can run arbitrary code outside Chrome's sandbox from a crafted HTML page; no in-the-wild exploitation is mentioned.
Anthropic says unreleased Claude built Chrome, Android and Linux exploits
Vendors were notified first; Chrome 156 fixed 62 CVEs, and the Linux root flaw is CVE-2026-98432.
Unreleased Claude model wrote Chrome, Linux and Android exploit chains
Anthropic says the lab-only chains were reported first and fixed, including Chrome 156, with no real-world incidents.
Chrome 156 and Firefox 159 patch critical memory-safety flaws
Google shipped 52 fixes, four rated Critical, and Mozilla fixed 167 bugs; both credited AI-assisted bug finding.
Anthropic's unreleased model chained flaws into patched OS exploits
Lab proofs, not live attacks, covered Chrome 156, iOS 26.5.2, Windows CVE-2026-33096, and Linux CVE-2026-98432.
Anthropic says Claude built critical exploit chains in Chrome, Safari and Android
Google assigned 62 critical or high Chrome CVEs, patched as of Chrome 156; Apple and Google say the Safari and Android issues are fixed.