01
Security
Google patches eighth Chrome zero-day of 2026, an XML flaw already exploited in the wild
Users who have not updated Chrome 157 remain exposed to an attack Google has not yet described in detail.
Users who have not updated Chrome 157 remain exposed to an attack Google has not yet described in detail.
Gains depend on Windows 11 version 26H2 at build 26300.9818 or later, and further memory compression work is planned for coming months.
Browsers on automatic updates already carry Microsoft's fix, and the research shows a new route for cross-site scripting that reaches major sites.
Systems that depend on the removed roots may need their certificates replaced, and disconnected machines must take the update manually.
The update makes ChatGPT more useful inside the browser, with history access in the sidebar and support across Chrome and other Chromium browsers.
The attack turns trusted AI assistants into high‑privilege proxies once a rogue Chrome‑style extension is installed.