Google Patches Critical Chrome Zero-Day Exploiting XML Vulnerability

Google has released a security update for Chrome, addressing a critical zero-day vulnerability in the browser's XML component. This marks the eighth actively exploited zero-day patched in 2026. The vulnerability, identified as CVE-2026-125350, is a high-severity use-after-free flaw that poses significant risks to users. The update, issued on November 9, follows an anonymous report received three days prior. Google confirmed that an exploit for this vulnerability exists in the wild, prompting organizations to expedite browser updates and ensure affected installations are relaunched. This latest patch includes nine security fixes, highlighting the ongoing need for vigilance against browser vulnerabilities. Organizations are urged to prioritize updates to protect users from potential exploits.