CISA Warns of Google Chromium 0-Day Vulnerability Actively Exploited in Attacks

A use-after-free vulnerability in Google Chromium's XML component (CVE-2026-125350) was actively exploited in the wild before many organizations could apply the available patch, prompting CISA to add it to its Known Exploited Vulnerabilities catalog. The flaw allows a remote attacker to execute arbitrary code within the browser sandbox simply by luring a user to a specially crafted webpage, requiring no special privileges or user interaction beyond a click. Because browsers are universal, internet-facing attack surfaces on virtually every endpoint, delayed patching—even by days—creates a wide exploitation window. This incident underscores that zero-days with available patches must be treated as critical emergencies, not routine monthly updates.