Google’s 9 November update addresses CVE-2026-125350, which it says is being exploited. The fix is in Chrome versions 157.0.8103.50 or 157.0.8103.51 for Windows and macOS, and 157.0.8103.50 for Linux.
Google released a Chrome security update on 9 November 2026 to fix a high-severity vulnerability in the browser’s XML component. Google said it was aware that an exploit for the flaw, identified as CVE-2026-125350, exists in the wild.
The US Cybersecurity and Infrastructure Security Agency has added the vulnerability to its Known Exploited Vulnerabilities catalog and requires federal agencies to apply the patch by 24 November 2026, The Hacker News said.
The flaw is a use-after-free bug: this type of bug typically occurs when a program tries to access memory that has already been freed. If successfully exploited, such bugs could corrupt data, crash a program or let an attacker run code. An anonymous security researcher discovered and reported the flaw on 6 November 2026.
Google has not disclosed how the flaw is being exploited or who is behind the attacks. It said access to technical details may remain restricted until most users have installed a fix. Restrictions will also remain if the bug is in a third-party library that other projects use and have not yet fixed.
The fixed versions are 157.0.8103.50 or 157.0.8103.51 for Windows and macOS, and 157.0.8103.50 for Linux. To check for the update in Chrome, open More > Help > About Google Chrome, then select Relaunch. Users of other Chromium-based browsers, including Microsoft Edge, Brave, Opera and Vivaldi, are advised to apply fixes as they become available.
The US Advanced Research Projects Agency for Health awarded the funding under its STREAM program as researchers plan to design and test alternatives to existing herbicides.
3 min
The government plans mandatory reporting of misaligned superintelligence (SI) behavior and cyber incidents, and access to models for evaluations, after an OpenAI agent breached a government website in June.
1 min
The bipartisan bill proposes shorter approval timelines for clean-energy and fossil-fuel projects and other infrastructure, including data centers. The procedural vote opens Senate consideration; it does not pass the bill.
2 min
