Chrome Zero-day vulnerability CVE-2026-125350 exploited; Google releases security update
BIBIBI
AT A GLANCE
According to PANews, the Chrome desktop update fixes 9 vulnerabilities, including one in the XML component that has been exploited in the wild. Browser wallet users should update as soon as possible.
Article
Google Chrome issues emergency update to fix 9 security vulnerabilities, including 1 that have been exploited in the wild
PANews November 10 reported, citing the official Chrome Releases blog, that Google has updated the Chrome desktop stable version to 157.0.8103.50/.51 (Windows, Mac) and 157.0.8103.50 (Linux), with a gradual rollout over the coming days to weeks. The update fixes 9 security vulnerabilities, including 7 high-severity and 2 medium-severity vulnerabilities, affecting V8、WebGL、GPU、XML, FileSystem and other components. Google said it is aware that the XML component's use-after-free vulnerability CVE-2026-125350 has been exploited in the wild. As cryptocurrency wallet extensions and similar tools often run in browsers, users are advised to update as soon as possible Chrome。
PANews cited the official Chrome Releases blog as saying that the Chrome desktop stable version was updated to 157.0.8103.50/.51 (Windows, Mac) and 157.0.8103.50（Linux）。
02
The update will roll out gradually over the coming days to weeks.
03
The update fixes 9 security vulnerabilities, including 7 high-severity and 2 medium-severity vulnerabilities, affecting V8、WebGL、GPU、XML, FileSystem and other components.
04
The report quoted Google as saying that the XML component's use-after-free vulnerability CVE-2026-125350 has been exploited in the wild.
05
The original report noted that cryptocurrency wallet extensions and similar tools often run in browsers and advised users to update as soon as possible Chrome。
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
This is a browser security update alert. The original report's reference to exploitation in the wild means that the vulnerability has been exploited, rather than merely discovered. The report identifies browser wallet extension users as a group that should pay attention to the update, but it does not say that wallets have been attacked or assets lost.
Why it matters to readers
The fixes include a vulnerability reportedly exploited in practice, making this a direct security alert for users of Chrome and browser wallet extensions.
If you use Chrome, especially with a browser wallet extension, follow the original report's advice and update as soon as possible; do not equate this vulnerability notice with theft of wallet assets.
Risks and unknowns
The current evidence is a PANews report; the original Chrome Releases blog post was not provided for verification.
The original report does not specify how the vulnerability was exploited, the scope of the attacks, or the status of affected users.
The original report does not establish that the vulnerability was used to attack cryptocurrency wallets or cause asset losses.
The update is being rolled out gradually; the original report does not confirm when each user will receive it.
Related Developments
Loading event timeline…
Related concepts
In-the-wild exploitation
This term is not in the glossary yet. Browse related concepts in the glossary.
