Google's latest Chrome desktop release fixes nine security issues, and the company says an exploit for a high-severity XML flaw exists in the wild, a security concern for desktop users.
Google's Nov. 9 stable-channel notice identifies the flaw as CVE-2026-125350, a use-after-free vulnerability in Chrome's XML component. The disclosure singles out that flaw for the in-the-wild exploit; Google does not describe the other eight fixes that way.
The update addresses issues in V8, WebGL, GPU, XML and FileSystem components. Google rated seven of the nine fixes high severity and two medium severity.
For Windows and Mac, Google lists desktop versions 157.0.8103.50 and 157.0.8103.51. The listed Linux version is 157.0.8103.50. Google said it would distribute the update to desktop users in stages over the coming days or weeks.
