# Chrome zero-day CVE-2026-125350 exploited

Published: 2026-11-10 · Severity: high · Sectors: Technology
Canonical: https://vorant.io/reports/5b3af658-f7dc-5302-b846-eea2bd6423eb/chrome-zero-day-cve-2026-125350-exploited
Vorant's rating weighs the evidence in the report: confirmed exploitation, victims claimed, CVSS and EPSS, and how many sources agree. It rates the report, not your assets.

> CERT-FR warns of multiple Google Chrome vulnerabilities, including CVE-2026-125350 which is actively exploited in the wild; patch required.

Source: cert.cyber.gouv.fr — https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1488

## What to check

- Applies to: The 16 CVEs named below. Whether you run an affected version is not assessed: check the versions the source lists.
- Exploitation: CISA lists CVE-2026-125350 as exploited in the wild.

CERT-FR has issued an advisory covering multiple vulnerabilities affecting Google Chrome, impacting Extended Stable versions prior to 156.0.8078.96 (Windows/Mac) and Stable versions prior to 157.0.8103.50/51 across Windows, Mac and Linux. Google's own security bulletins, dated 9 November 2026, do not specify the exact nature of the security impact for most flaws, but CERT-FR highlights that CVE-2026-125350 is confirmed by Google to be actively exploited in the wild, making this an urgent patching priority for all Chrome deployments.

The advisory lists fifteen CVEs in total without further technical detail on vulnerability classes (e.g., memory corruption, type confusion) or exploitation requirements, as Google has not disclosed specifics beyond confirming active exploitation of one flaw. Defenders should prioritize immediate update of Chrome and Chrome Extended Stable to the fixed versions referenced in Google's release notes, as browser-based exploitation chains are a common initial access vector and the presence of an actively exploited zero-day significantly raises urgency for rapid patch deployment across the estate.

## Mentioned in this report

- Vulnerabilities: CVE-2026-121068, CVE-2026-121076, CVE-2026-121095, CVE-2026-121184, CVE-2026-121208, CVE-2026-121213, CVE-2026-121233, CVE-2026-125342, CVE-2026-125343, CVE-2026-125344, CVE-2026-125345, CVE-2026-125346, CVE-2026-125347, CVE-2026-125348, CVE-2026-125349, CVE-2026-125350 (KEV)

Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1488

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/5b3af658-f7dc-5302-b846-eea2bd6423eb/chrome-zero-day-cve-2026-125350-exploited.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup