[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-chrome-patches-its-eighth-actively-exploited-flaw-of-2026":10,"sections":41},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":30,"tags":31,"sources":36,"feedback":40,"feedback_at":22,"cost_usd":40,"total_tokens":40},12780,"chrome-patches-its-eighth-actively-exploited-flaw-of-2026","Chrome Patches Its Eighth Actively Exploited Flaw of 2026","Google's latest Chrome update fixes nine flaws, including a use-after-free bug in the XML component that Google confirmed attackers are already using.","If you use Chrome or a Chromium-based browser, update it: Google has patched nine security flaws, and one of them, CVE-2026-125350, is already being exploited.\n\nThe fixed versions are 157.0.8103.50\u002F.51 on Mac and Windows, and 157.0.8103.50 on Linux. To check, click the three dots in the top-right corner, then go to More > Help > About Google Chrome. The page shows your version and downloads the update if you are behind.\n\nThe bug is a use-after-free flaw in Chrome's XML component. That means the browser frees a chunk of memory, then a program tries to use it anyway. In the worst case, an attacker can run their own code inside the app, which is why this class of bug draws attention. Google confirmed an exploit exists in the wild, so at least one target has already been hit. The company has kept other details to itself, including who was targeted and how.\n\nThis is the eighth actively exploited Chrome flaw Google has patched in 2026. Chrome is the world's most popular browser, which makes it the obvious place for attackers to spend their effort. For users, that turns the update check from an occasional chore into a routine.\n\nChromium-based browsers share the flaw. Microsoft Edge, Opera, and Brave may not have the fix yet, so check their update pages too.\n\nThere is a wider backdrop. AI models have become good at finding vulnerabilities this year, and patch volume has climbed: Microsoft's latest Patch Tuesday carried more than 1,400 fixes, and Apple recently patched two iMessage flaws that exposed texts. That surge is background for this story, not an explanation of it, since this bug has not been linked to AI-assisted discovery.\n\nWhat remains unanswered is who used CVE-2026-125350, and against whom. Until Google says more, the version number is the one thing a user can verify.","[\"chrome\",\"zero-day\",\"browser-security\",\"google\"]","2026-11-10T20:00:00.000Z","2026-11-10T20:30:18.742Z","2026-11-10T20:30:19.148Z","published",null,[24],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"Remove the process-note phrasing ('The source ties the surge...', 'Nothing here says...'), and either verify November 9 or drop it, since the source only says 'Monday' and the 313-day pace math depends on that date. Also cut the unsupported conclusion that 'discovery is outrunning the cleanup', and say plainly that the AI-driven patch surge is background context and not linked to this bug.","resolved","security",[32,33,34,35],"chrome","zero-day","browser-security","google",[37],{"name":38,"url":39},"Lifehacker","https:\u002F\u002Flifehacker.com\u002Ftech\u002Fthis-actively-exploited-security-vulnerability-is-putting-your-chrome-browser?utm_medium=RSS",0,{"sections":42},[43,48,52,57,62,67,72,77,82,87,92,97,102,107],{"name":44,"slug":45,"count":46,"latest_published_at":47},"AI","ai",7144,"2026-11-12T13:27:45.000Z",{"name":49,"slug":30,"count":50,"latest_published_at":51},"Security",1128,"2026-11-11T18:05:00.000Z",{"name":53,"slug":54,"count":55,"latest_published_at":56},"Deals","deals",642,"2026-11-12T14:00:00.000Z",{"name":58,"slug":59,"count":60,"latest_published_at":61},"Policy","policy",619,"2026-11-12T12:53:36.000Z",{"name":63,"slug":64,"count":65,"latest_published_at":66},"Consumer Tech","consumer-tech",364,"2026-11-12T11:12:32.000Z",{"name":68,"slug":69,"count":70,"latest_published_at":71},"Hardware","hardware",336,"2026-11-12T11:24:43.000Z",{"name":73,"slug":74,"count":75,"latest_published_at":76},"Science","science",230,"2026-11-12T10:00:00.000Z",{"name":78,"slug":79,"count":80,"latest_published_at":81},"Software","software",168,"2026-11-11T17:36:49.000Z",{"name":83,"slug":84,"count":85,"latest_published_at":86},"Startups","startups",159,"2026-11-11T12:30:00.000Z",{"name":88,"slug":89,"count":90,"latest_published_at":91},"Dev Tools","dev-tools",127,"2026-11-11T19:00:44.000Z",{"name":93,"slug":94,"count":95,"latest_published_at":96},"General","general",118,"2026-11-11T16:49:42.000Z",{"name":98,"slug":99,"count":100,"latest_published_at":101},"Gaming","gaming",107,"2026-11-12T10:09:03.000Z",{"name":103,"slug":104,"count":105,"latest_published_at":106},"Reviews","reviews",38,"2026-10-20T12:00:00.000Z",{"name":108,"slug":109,"count":110,"latest_published_at":111},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]