How to update Chrome now: Google fixes eighth zero-day flaw of 2026 (CVE-2026-125350)

Google has published an urgent security update for Chrome that fixes CVE-2026-125350, a vulnerability that attackers were already exploiting. According to security experts, it is the eighth zero-day flaw in Chrome in 2026. Updating takes a minute.

Which version do you need

How to update Chrome on your computer

1. Open Chrome.
2. Click the three dots menu (top right).
3. Go to Help > About Google Chrome.
4. Chrome will search for the update and download it.
5. Click Restart. Your tabs will reopen.

How to update Chrome on your mobile device

• Android: open Google Play, search for Chrome, and click Update.
• iPhone: open the App Store, tap your profile picture, and update Chrome from the list.

What is the flaw

• It is a use-after-free error in the XML component of the browser. This type of flaw can allow malicious code to be executed when visiting a prepared website.
• It is rated as high severity.
• Google learned about it on November 6 through an external report and fixed it on November 9.
• The US Cybersecurity and Infrastructure Security Agency, CISA, added it to its catalog of exploited vulnerabilities on November 10.
• The update fixes a total of nine security flaws.

What if I use Edge, Brave, Opera, or Vivaldi?

All of these browsers are based on Chromium, the engine that powers Chrome, and usually release their own update shortly after. Go to the About section of your browser to force it to check for updates.

Tips to not rely on luck

• Restart your browser often: Chrome downloads updates automatically, but it only applies them when you close it.
• Update your operating system as well.
• Be cautious of unexpected links, even if they come from known contacts.

Frequently Asked Questions

How do I know if I'm protected? If it says 157.0.8103.50 or later and "Chrome is up to date" in About Google Chrome, you are.

Does this affect me if I use Firefox or Safari? This specific flaw is related to Chrome and Chromium-based browsers.

Have attackers stolen data using this flaw? Google has not provided details of the attacks, as is usual while most users update.

Sources: Google, BleepingComputer, Malwarebytes, SOCRadar, and CISA.