- Published
- Source
- Bitdefender
- Reported by
- 2 publishers
- Filed under
- Phishing & scams, Attacks, Malware & exploits
- Vulnerabilities
- 1 CVE Exploited
Google has released security updates for Chrome after confirming that attackers are exploiting a high-severity vulnerability in the browser's XML component. Windows, Mac, Linux and Android users should update as soon as possible. Google has issued another round of emergency security fixes for Chrome, addressing a vulnerability that hackers are already exploiting in real-world attacks. The flaw, tracked as CVE-2026-125350, affects Chrome's XML processing component and could let attackers execut…
If you run the affected product
- Find every instance – especially the ones reachable from the internet.
- Apply the vendor's patch or mitigation now: exploited flaws are fixed in days, not at the next patch cycle.
- Then check for signs it was used before you patched: web shells, new accounts, unusual outbound traffic.
More helpCISA's Known Exploited Vulnerabilities catalogue (opens in a new tab)
Also reported by 1 more publisher
The vulnerabilities in this story
CVE-2026-125350 in the NVD (opens in a new tab)
- EPSS<1%chance of exploitation in 30 days
- CISA KEVExploitedon the list since 10 Nov
Exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog (CC0). Exploit prediction: EPSS by FIRST. This product uses the NVD API but is not endorsed or certified by the NVD.
MyCyberWay training
Blue Team Analyst, Email & Phishing Investigation
Someone will report this email. Know exactly what to do next.
Analyse a reported phishing email properly: headers, message trace and quarantine, what SPF, DKIM and DMARC failures tell you, and the indicators that make it business email compromise.
- Header forensics and message trace
- SPF, DKIM and DMARC failures explained
- Spotting business email compromise
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.