Google released a Chrome security update on Monday that patches nine vulnerabilities, including one actively exploited flaw that puts all Chrome users at risk.
The serious vulnerability is CVE-2026-125350, a use-after-free bug in Chrome's XML component. Use-after-free flaws occur when a system frees up a memory location but a program tries to access it anyway. This type of bug can allow arbitrary code execution, giving hackers the ability to run their own code in the app or system.
Google confirmed that CVE-2026-125350 has an active exploit in the wild. The company did not release additional details but stated the flaw is dangerous because someone has already used it against a target. This is Chrome's eighth active exploit of the year.
To protect yourself, update Chrome immediately to at least version 157.0.8103.50 or .51 on Mac or PC, or 157.0.8103.50 on Linux. Click the three dots in the top-right corner, then go to More > Help > About Google Chrome to check your version.
Users of Chromium-based browsers like Microsoft Edge, Opera, and Brave are also affected by this flaw. Watch for security updates on those platforms as well.