# Google patches actively exploited Chrome XML vulnerability

_Published Tuesday, November 10, 2026 at 11:18 AM EST · Security · Latest · Tier 2 — Notable_

Google released a Chrome security update on November 9 fixing nine vulnerabilities, including an XML component flaw already being exploited, Softonic reported. The high-severity vulnerability, CVE-2026-125350, involves software using memory after it has been freed; visiting a malicious site could cause corruption, crashes or arbitrary code execution.

The update covers Windows, macOS and Linux. Windows and macOS versions are 157.0.8103.50 and 157.0.8103.51; Linux receives 157.0.8103.50. Google has not disclosed details of the attacks or their targets while the update rolls out.

## Sources

- [Softonic](https://en.softonic.com/articles/chrome-updated-for-exploited-zero-day-patch-fixes-9-flaws)
- [BleepingComputer](https://www.bleepingcomputer.com/news/security/critical-xen-orchestra-auth-bypass-flaw-exploited-to-hijack-vm-servers/)

---
Canonical: https://techandbusiness.org/newswire/dPfjUk_99yMnsqvHk818Q7
Published: 2026-11-10T16:18:37.709Z
Story chronology: 2026-11-09T00:00:00.000Z
Retrieved: 2026-11-10T18:17:33.298Z
Publisher: Tech & Business (techandbusiness.org)