Google sounded the alarm, the Chrome browser needs to be updated urgently

A critical update has been released for the Chrome browser to fix a zero-day vulnerability, CVE-2026-125350, which has already been exploited by attackers. This security flaw resides in the Chrome XML component, allowing attackers to manipulate the browser's memory layout and execute malicious code. Google has not disclosed further details about the exploitation method to protect users until the fix is widely available. The updated versions that address this vulnerability are 157.0.8103.50/.51 for Windows and macOS, and 157.0.8103.50 for Linux. Users are advised to restart their browsers to complete the installation of the updates. This marks the eighth zero-day vulnerability fixed by Google in Chrome this year.