Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026

Google has released a security update for Chrome to address nine vulnerabilities, including one that is being actively exploited. The exploited vulnerability is a high-severity use-after-free bug in the XML component, identified as CVE-2026-125350. This type of bug occurs when a program tries to access memory after it has been freed. The update patches this and eight other security vulnerabilities in Chrome. The vulnerability is the eighth zero-day exploit in Chrome this year to be addressed by Google. The CVSS score for this vulnerability is not available.