This Actively Exploited Chrome Vulnerability Is Putting Your Browser at Risk

Lifehacker Tech by 3 min read 28x views
This Actively Exploited Chrome Vulnerability Is Putting Your Browser at Risk

Share Post

Jake Peterson is Lifehacker’s Tech Editor, and has been covering tech news and how-tos for nearly a decade. His squad covers all things technology, including AI, smartphones, computers, equivalent consoles, and subscriptions.

If you've seen an uptick in safety updates as of late, you're not alone. AI models have rotate into very fine at finding new safety vulnerabilities throughout 2026. Researchers and hackers alike are increasingly relying on these models in their idiosyncratic pursuits: Hackers desire to discover these flaws to utilize them, during researchers desire to obstacle hackers from doing so. Microsoft's latest Patch Tuesday update included additional than 1,400 patches; meanwhile, Apple's latest safety update fixed two iMessage flaws that let the two bad actors and guiltless parties alike admission texts they shouldn't.

Whether you use a Mac or a PC, you likely browse the web alongside Chrome, or a Chromium-based browser. As it happens, Google's web browsing phase is the latest to obtain an crucial safety update—but it's far from the archetypal crucial Chrome update of the year.

Google fair patched its eighth actively exploited Chrome flaw of 2026

As reported by The Hacker News, Google released a new update for Chrome on Monday that patches nine safety flaws. While all vulnerabilities are crucial to patch, one in particular is additional grave than the rest: CVE-2026-125350, a use-after-free bug in Chrome's XML component.

Use-after-free vulnerabilities happen whenever the scheme frees up a recollection location, but a program tries to admission it anyway. It's a glitch in programming, but it offers bad actors an chance to interrupt into your system. At worst, it allows arbitrary code execution, or, in another words, gives hackers the capability to run their own code in the app or system.

That's bad adequate on the surface, but, unfortunately, Google confirmed that CVE-2026-125350 has an energetic utilize in the wild. The business is keeping another particulars near to the vest, but it's hazardous nonetheless. At smallest someone, somewhere, has used this flaw against a target, which puts all Chrome users (as fine as users of Chromium-based browsers) at risk.

What do you think so far?

What's more, this isn't Chrome's archetypal energetic utilize of the year—this is its eighth. The business is playing catch-up alongside hackers looking to mark users of its browser, which makes sense, seeing as Chrome is by far the world's most famous browser.

How to place this latest Chrome flaw

If you're using Chrome on your computer, you'll desire to update it as shortly as possible. Make certain you're operating at smallest versions 157.0.8103.50/.51 on Mac or PC, or 157.0.8103.50 on Linux. To check, click the three dots in the top-right border of your Chrome window, afterward go to More > Help > About Google Chrome.

Other Chromium-based browsers may not have the update yet, but they are affected by this flaw. If you use browsers akin Microsoft Edge, Opera, or Brave, keep an eye on your updates to instal any of the latest patches.

Covering tech news, how-to guides, explainers, and more.

Other Article Lifehacker Tech
↑
Close Right Ads
Close Left Ads