Published 17 hours ago • loading... • Updated 8 hours ago

Google fixes exploited Chrome CSS zero-day

This past week, Google quietly pushed an emergency Chrome fix after attackers exploited the browser's first reported zero-day of 2026.
A crafted HTML/CSS page can trigger CVE-2026-2441, a use-after-free bug in Chrome's CSS handling that allows code execution in the browser sandbox.
On February 11, Security researcher Shaheen Fazim reported the flaw, and Google released Chrome 145.0.7632.75 and 144.0.7559.75 with update rollout coming days/weeks.
Google said it will withhold technical details until most users are patched to reduce risk, and the company declined to specify whether attacks were targeted or widespread.
Following a year of multiple zero-days, Google patched eight zero-days across 2025, and the fix arrives days after researchers flagged at least 287 Chrome extensions, highlighting browser ecosystem risks.

Insights by Ground AI

21 Articles

Chrome rushes emergency patch for actively exploited zero-day bug

Google has pushed an emergency update for Chrome to close a high-severity zero-day vulnerability that's already being exploited in the wild. The flaw stems from a use-after-free bug in Chrome's CSS font handling and can lead to crashes, rendering issues, or worse.Read Entire Article

12 hours ago

Read Full Article

Tech Radar

Center

Google patches first Chrome zero-day of the year - so update now or face attack

An 8.3/10 use after free in CSS Google Chrome bug was patched after being abused by unnamed threat actors.

12 hours ago·United Kingdom

Read Full Article

The Register

Center

Google fixes exploited Chrome CSS zero-day

: High-severity CSS flaw let malicious webpages run code inside the sandbox

14 hours ago

Read Full Article

BleepingComputer

Center

Google patches first Chrome zero-day exploited in attacks this year

Google has released emergency updates to fix a high-severity Chrome vulnerability exploited in zero-day attacks, marking the first such security flaw patched since the start of the year.

1 day ago

Read Full Article

Developpez.com

The Latest Security Update of Google Chrome Fixes a Very Serious Flaw Actively Exploited by Hackers, a Bug in Css that Allows a Remote Attacker to Execute Arbitrary Code

The latest security update of Google Chrome fixes a very serious flaw actively exploited by hackers, a bug in CSS that allows a remote attacker to execute arbitrary codeGoogle deployed a critical security update to correct a very serious vulnerability of Chrome, which was actively exploited by hackers. Discovered by security researcher Shaheen Fazil, this flaw operates a "use-after-free" bug in CSS, allowing hackers to...

8 hours ago

Read Full Article

Android Headlines

Update Now: Google Fixes the First Active Chrome Zero-Day of 2026

Google has released an emergency zero-day patch for its Chrome browser to address a high-severity security issue. The vulnerability, identified as CVE-2026-2441, marks the first zero-day issue patched by the firm in 2026. The tech giant confirms that attackers have already used the flaw in real-world attacks. Users across Windows, macOS, and Linux are advised to install the latest patch immediately. The latest Google Chrome update patches its fi…

9 hours ago

Read Full Article

Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/year