Emergency Chrome Patch Closes In-the-Wild Zero-Day Exploit

1 min read
Source: CyberSecurityNews
Emergency Chrome Patch Closes In-the-Wild Zero-Day Exploit
Photo: CyberSecurityNews
TL;DR

Google issued an emergency Chrome security update (Windows/macOS: 149.0.7827.102/103; Linux: 149.0.7827.102) patching 74 vulnerabilities, including a critical zero-day in the V8 engine that was observed exploited in the wild (CVE-2026-11645). The release also fixes 17 Critical flaws across core subsystems after a broad security audit, with many use-after-free memory issues that could enable remote code execution. An external researcher “303f06e3” discovered the zero-day, for which Google awarded $55,000; update guidance is to manually install the patch now via Help → About Google Chrome and relaunch, with enterprise admins urged to push the update to endpoints promptly as automatic rollout continues.

Share this article

Want the full story? Read the original reporting

Read on CyberSecurityNews