Google patches first Chrome zero-day of the year, so update now or face attack



  • Google Patches Chrome Zero-Day CVE-2026-2441, “Use After Free” Bug in CSS
  • The exploit allowed arbitrary code execution through crafted HTML pages that were actively abused in the wild.
  • Update to Chrome 145.0.7632.75/76 (Windows/Mac) or 144.0.7559.75 (Linux) to stay protected

Google has patched a high-severity vulnerability in the Chrome browser that was apparently being used as a zero-day in the wild.

In a security advisory, Google said it addressed CVE-2026-2441, a “free use in CSS in Google Chrome before 145.0.7632.75.” This bug, with a severity score of 8.3/10 (high), allows threat actors to execute arbitrary code within a sandbox via a crafted HTML page.



Leave a Comment

Your email address will not be published. Required fields are marked *