Google releases emergency updates to patch a Chrome vulnerability that is being exploited in real-world attacks. The patch is the eighth zero-day fixed in the browser since the start of the year, according to the coverage.
All three outlets describe the affected flaw as a high-severity issue in Chrome’s XML component and characterize it as a use-after-free bug. Two outlets also identify the vulnerability by a CVE (as CVE-2026-125350) and note it is under active exploitation “in the wild.” SecurityWeek adds that the issue was reported anonymously on a specific date.
Other details differ slightly between reports. The Hacker News and SecurityWeek emphasize the XML use-after-free nature and the fact of exploitation, while Bleeping Computer frames the update primarily as an emergency patch and highlights that it is the eighth such case this year. Together, the articles focus on the same core event—Google’s security update and the browser component affected—while varying the amount of technical context provided.
