Chrome Zero-Day Vulnerability CVE-2026-2441 Exploited in the Wild – Urgent Patch Released
Google Releases Urgent Security Update for Chrome
Google has released an urgent security update for its Chrome browser to address a high-severity vulnerability that is being actively exploited in the wild.
Vulnerability Details
The flaw, identified as CVE-2026-2441, is a use-after-free bug in the browser’s CSS component. It has a CVSS score of 8.8, indicating a significant level of severity.
Discovery and Patch
The vulnerability was discovered and reported by security researcher Shaheen Fazim on February 11, 2026. Google has released a patch for the flaw in Chrome version 145.0.7632.75/76 for Windows and Apple macOS, and 144.0.7559.75 for Linux.
Users are advised to update their browsers to the latest version to ensure optimal protection.
Implications and Recommendations
It is worth noting that this is the first actively exploited zero-day vulnerability in Chrome that Google has patched in 2026. Last year, the company addressed eight zero-day flaws in Chrome that were either actively exploited or demonstrated as proof-of-concept.
The disclosure of CVE-2026-2441 highlights the ongoing threat posed by browser-based vulnerabilities, which can be exploited to gain access to sensitive information or disrupt critical systems.
Users of other Chromium-based browsers, such as Microsoft Edge, Brave, Opera, and Vivaldi, are also advised to apply the fixes as and when they become available.
To ensure the latest updates are installed, users can navigate to More > Help > About Google Chrome and select Relaunch. This will ensure that the browser is updated to the latest version, which includes the patch for CVE-2026-2441.
About Author
English