GoogleAnalysisCISA adds Google Chrome XML use-after-free zero-day flaw to KEV catalog
What happened.CISA ordered federal agencies to remediate an actively exploited high-severity Google Chrome use-after-free vulnerability affecting browser XML components.
Why it matters.Web browsers serve as the primary interactive boundary between enterprise workstations and untrusted internet assets. When memory corruption vulnerabilities escape XML processing routines, attackers compromise employee endpoints through drive-by downloads. Infrastructure teams must deploy Chrome 157 stable updates across all corporate endpoints immediately. Security operations centers should monitor workstation logs for abnormal browser sub-processes.
The technical specifications:
- Vulnerability mechanics: Tracked as CVE-2026-125350, the defect resides in the browser XML parsing engine during extensible stylesheet language transformations.
- Exploit vector: Remote attackers trick victims into visiting specially crafted web pages, triggering memory corruption to execute arbitrary code within the browser sandbox.
- Exploitation status: Google confirmed active zero-day exploitation in the wild targeting desktop users prior to coordinated patch distribution.
- Federal mandate: CISA added the defect to its Known Exploited Vulnerabilities catalog under Binding Operational Directive 26-04, setting an immediate patch deadline.
- Remediation release: Google published desktop browser updates 157.0.8103.50 for Linux and 157.0.8103.50/.51 for Windows and macOS.
STORYLINE PROGRESSION & CONTEXT
This report represents a verified evolution of prior newsroom intelligence: