Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026

Google on Monday released updates to patch nine security vulnerabilities, including one that has come under active exploitation in the wild.

The high-severity vulnerability, assigned the CVE identifier CVE-2026-125350 (CVSS score: N/A), has been described as a use-after-free bug in the XML component.

Use-after-free bugs typically occur when a program attempts to access a memory location after