Chrome zero-day CVE-2026-125350 is being exploited: update Chrome now

Google has released a Chrome update with 9 security fixes: version 157.0.8103.50 or .51 on Windows and Mac computers, and 157.0.8103.50 on Linux. Google says an exploit for one of them, CVE-2026-125350, already exists in the wild. Update Chrome on every office computer today and restart the browser, because the fix only works after a restart.

What was fixed?

Google's release note of 9 November 2026 lists 9 security fixes, 7 rated high and 2 medium. The flaw being exploited, CVE-2026-125350, is a use after free bug in Chrome's XML handling, reported on 6 November. Others were in WebGL, the graphics (GPU) code, compositing, the FileSystem feature and the V8 JavaScript engine. Google is keeping bug details private until most users are updated, which is normal.

Businesses that use Chrome's Extended Stable channel get version 156.0.8078.96 with 11 security fixes. Google's note for that release does not say whether the exploited XML flaw is among them, so IT staff managing Extended Stable should check with Google before relying on it.

Who is affected?

Anyone using Google Chrome on Windows, Mac or Linux older than version 157.0.8103.50. Microsoft Edge, Brave and Opera are built on the same Chromium code and usually release their own fix soon after; update those too when the update appears.

What to do

1. Open Chrome, click the three dots, then Help, then About Google Chrome. Chrome checks for the update by itself.
2. Click Relaunch when it appears. Save your work first, since open tabs reopen but unsaved forms may not.
3. Check the version shows 157.0.8103.50 or later.
4. Do the same in Edge (Settings, then About Microsoft Edge) and in any other browser your staff use.
5. Ask staff who never close their browser to restart it today.

How SyncTech can help

If your office PCs or website need checking after a browser alert, our help centre explains how to reach us. For business websites, our website care service keeps the site itself patched.

Source and credit

We are sharing this news from Google. This summary is written by Synctech in our own words.

• Stable Channel Update for Desktop, Chrome Releases, Google, 9 November 2026: http://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_018223192.html
• Extended Stable Update for Desktop, Chrome Releases, Google, 9 November 2026: http://chromereleases.googleblog.com/2026/11/extended-stable-update-for-desktop_0910980127.html Retrieved 10 November 2026. Google Chrome, Microsoft Edge, Brave and Opera are trademarks of their owners. Synctech is not connected with them. This is general information, not legal, tax or financial advice. If anything here is wrong, email support@synctech.com.my and we will correct it.