Update Chrome now: Google fixes an exploited zero-day in Chrome 157.0.8103.50

Google pushed Chrome 157.0.8103.50 on November 9. Security reporters say it fixes CVE-2026-125350, a flaw Google says already has an exploit in the wild.

In this brief: 3 sections 1 min read

- • CVE-2026-125350: a use-after-free bug in Chrome's XML component, per Malwarebytes and BleepingComputer.
- • Reported to Google by a third party on November 6.
- • Google says an exploit for it exists in the wild; it hasn't shared attack details.
- • Windows and Mac: 157.0.8103.50 or .51.
- • Linux: 157.0.8103.50.
- • Android: 157.0.8103.50, per Malwarebytes.
- • Rollout is gradual, so check by hand rather than wait.
- • Desktop: menu, Help, About Google Chrome, then Relaunch.
- • Android: update Chrome in the Play Store.
- • If you use another Chromium-based browser such as Edge, Brave or Opera, install its next update when offered.

Read full analysis on chromereleases.googleblog.com

Useful?