Published 1 day ago • loading... • Updated 59 minutes ago

Google fixes exploited Chrome CSS zero-day

This past week, Google quietly pushed an emergency Chrome fix after attackers exploited the browser's first reported zero-day of 2026.
A crafted HTML/CSS page can trigger CVE-2026-2441, a use-after-free bug in Chrome's CSS handling that allows code execution in the browser sandbox.
On February 11, Security researcher Shaheen Fazim reported the flaw, and Google released Chrome 145.0.7632.75 and 144.0.7559.75 with update rollout coming days/weeks.
Google said it will withhold technical details until most users are patched to reduce risk, and the company declined to specify whether attacks were targeted or widespread.
Following a year of multiple zero-days, Google patched eight zero-days across 2025, and the fix arrives days after researchers flagged at least 287 Chrome extensions, highlighting browser ecosystem risks.

Insights by Ground AI

24 Articles

Chrome rushes emergency patch for actively exploited zero-day bug

Google has pushed an emergency update for Chrome to close a high-severity zero-day vulnerability that's already being exploited in the wild. The flaw stems from a use-after-free bug in Chrome's CSS font handling and can lead to crashes, rendering issues, or worse.Read Entire Article

19 hours ago

Read Full Article

Tech Radar

Center

Google patches first Chrome zero-day of the year - so update now or face attack

An 8.3/10 use after free in CSS Google Chrome bug was patched after being abused by unnamed threat actors.

19 hours ago·United Kingdom

Read Full Article

The Register

Center

Google fixes exploited Chrome CSS zero-day

: High-severity CSS flaw let malicious webpages run code inside the sandbox

21 hours ago

Read Full Article

BleepingComputer

Center

Google patches first Chrome zero-day exploited in attacks this year

Google has released emergency updates to fix a high-severity Chrome vulnerability exploited in zero-day attacks, marking the first such security flaw patched since the start of the year.

1 day ago

Read Full Article

Heti Világgazdaság

Google Has Thrown Everything Aside, Releasing an Emergency Update for the Chrome Browser

The first zero-day vulnerability of the year has been patched in Chrome, and based on the available information, the problem was quite serious.

59 minutes ago·Hungary

Read Full Article

discountwalas - Bringing Daily Dose of News

Google Chrome Security Alert 2026: Govt Warns of Critical CSS Bug - discountwalas

The Indian government issued a high-severity cybersecurity alert for Google Chrome users Tuesday. Officials urged immediate updates to prevent remote attackers from hijacking vulnerable systems. The national cybersecurity agency, CERT-In, released the advisory following reports of a zero-day flaw. This vulnerability, tracked as CVE-2026-2441, is already being exploited in the wild, Google confirmed. The flaw impacts Chrome versions on Windows, M…

4 hours ago

Read Full Article

Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/year