Skip to main content
Apexward Pulse
3 reportsPriority Medium

Chrome Update Patches Exploited XML Zero-Day

A newly disclosed vulnerability in Chrome's XML component is being actively exploited, prompting an urgent update to mitigate potential attacks on UK organisations.

First report Latest

What is going on

  • A high-severity use-after-free vulnerability in Chrome's XML component was reported on 6 November and is already being exploited in attacks.
  • Chrome for Android has been updated to version 157.0.8103.50, with the release becoming available on Google Play over the next few days.
  • An update was issued to address the exploited vulnerability, which is the eighth zero-day patched in Chrome this year.
  • What to watch: Further confirmation of the vulnerability's impact and the effectiveness of the update in preventing exploitation.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed