Google fixes the eighth actively exploited Chrome zero-day of 2026
At a glance
Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.
Briefing
- IT leaders should confirm if their organisation uses Chrome and ensure it is up to date with the latest security patches.
Questions to ask IT
- Do we run Google Chrome, and which versions?
- If it is not yet patched, what mitigation is in place, and will the fix be done by 10 Dec?
Next steps
- Confirm whether this affects systems or suppliers in your estate
- A V8 vulnerability tracked as CVE-2026-125350 was among nine Chrome flaws that have been actively exploited in the wild.
Next steps
- Review the advisory against your asset inventory and patch cadence
Summary
- Google has fixed the eighth actively exploited Chrome zero-day vulnerability of 2026, according to reports.
Read the original reportSecurity Affairs(opens in a new tab)
Products and services involved
- Google Chrome84% match confidence
Pulse
Last change 43m ago · Next recheck 11 Nov 2026, 12:19 UK time
- Story10 Nov 2026, 12:19 UK time · 43m ago
Linked reporting from Security Affairs (independent original reporter).
Read source (Security Affairs)
1 entry so far. The timeline chart appears once this story has more history.
Sources
- Security AffairsNews
Google fixes the eighth actively exploited Chrome zero-day of 2026
How we know
Statements extracted from sources. Higher confidence means stronger corroboration.
- ClaimedHeadline60% confidence
Google fixes the eighth actively exploited Chrome zero-day of 2026
- ProbableSummary fact75% confidence
Google fixes the eighth actively exploited Chrome zero-day of 2026 Security Affairs Google patched nine Chrome flaws, including a V8 vulnerability tracked as CVE-2026-125350, that attackers have been actively exploiting in the wild. Iris Ohyama warns that a cloud data breach may have exposed personal information of 7.7 million customers, including names and passwords.

