Update Chrome now: Google fixes a new zero-day flaw already exploited

Google fixes high severity Chrome V8 bug (CVE‑2026‑11645) exploited in the wild
Flaw allows remote code execution via crafted HTML on versions prior to 149.0.7827.103
Patches are now available for Windows, Mac and Linux; users are advised to update immediately

Google has fixed a high-severity vulnerability in its Chrome browser that was apparently being misused.

The company has issued a new security advisory notifying users of fixes for dozens of vulnerabilities, including an out-of-bounds read and write bug in Chrome V8 that could allow remote attackers to execute arbitrary code in a sandbox via a crafted HTML page, found in Google Chrome before 149.0.7827.103.

The issue is now tracked as CVE-2026-11645 and has received a severity score of 8.8/10 (high).

No details on the attacks

In theory, the flaw could be used to steal emails, documents, session cookies or other sensitive corporate information. All it would take is for a person to open a weaponized page in a vulnerable version of Chrome to trigger the exploit.

“Google is aware that an exploit for CVE-2026-11645 exists in the wild,” Google said in the advisory, without sharing any details. “Access to bug details and links may be restricted until a majority of users are updated with a fix,” the company added. “We will also keep restrictions if the bug exists in a third-party library that other projects also depend on but have not yet been fixed.”

The bug has now been fixed in the Stable Desktop channel with fixes released for Windows (149.0.7827.102), Mac (149.0.7827.103), and Linux (149.0.7827.102).

Google typically says it takes weeks for the fix to be rolled out globally, but in most cases, by the time the advisory is published, most browsers will have already been patched. Those who are unsure if their Chrome is updated should navigate to chrome://settings/help in the address bar, press Enter, and wait for Chrome to check for updates. If any are found, they will be prompted to download and install them.

Via BeepComputer