Skip to main content
Apexward Pulse
Type Vulnerability

Google

Chrome Update Patches Exploited XML Zero-Day, Eighth This Year

1 source

At a glance

Low
30-day window, from the last update
Evidence-weighted, not popularity
Why Low

Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.

Briefing

  • IT leaders should assess whether Chrome is in their estate and ensure updates are applied to mitigate potential exploitation.

Questions to ask IT

  • Do we run Google Chrome, and which versions?
  • If it is not yet patched, what mitigation is in place, and will the fix be done by 10 Dec?

Next steps

  1. Confirm whether this affects systems or suppliers in your estate

Summary

  • A high-severity use-after-free vulnerability in Chrome's XML component was reported on 6 November and is already being exploited in attacks.

Read the original reportSecurityWeek(opens in a new tab)

Products and services involved

3 reports

Part of Chrome Update Patches Exploited XML Zero-Day

Pulse

Last change 35m ago · Next recheck 11 Nov 2026, 06:26 UK time

  1. Story10 Nov 2026, 06:26 UK time · 35m ago

    Linked reporting from SecurityWeek (independent original reporting).

    Read source (SecurityWeek)

1 entry so far. The timeline chart appears once this story has more history.

Sources

How we know

Statements extracted from sources. Higher confidence means stronger corroboration.

  • ClaimedHeadline60% confidence

    Chrome Update Patches Exploited XML Zero-Day, Eighth This Year

  • ProbableSummary fact75% confidence

    The high-severity use-after-free in Chrome’s XML component was reported anonymously on 6 November and is already exploited in attacks.