NewsSecurityWeek
Chrome Update Patches Exploited XML Zero-Day, Eighth This Year
Teaser from the source
The high-severity use-after-free in Chrome’s XML component was reported anonymously on November 6 and is already exploited in attacks. The post Chrome Update Patches Exploited XML Zero-Day, Eighth This Year appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekMore on Zero-Day
Other advisories
- Highpwn_watch:d-link-dgs-3130-ddp-firmware-zero-days-nov-2026D-Link DGS-3130-30TS interim advisory: multiple unpatched DDP and firmware zero-days (SAP10523)
- CriticalCVE-2026-76418Cisco ASA and FTD zero-day CVE-2026-76418 exploited to crash SSL VPN firewalls
- CriticalCVE-2026-114625Arista VeloCloud Orchestrator zero-day CVE-2026-114625 exploited in attacks
- CriticalCVE-2026-108398Windows Shell Mark-of-the-Web bypass zero-day (CVE-2026-96951)
- CriticalCVE-2026-111357Ivanti Connect Secure zero-day chain (CVE-2026-104935) exploited for root
- CriticalCVE-2026-104286FortiMail unauthenticated file-write zero-day CVE-2026-104286
- CriticalCVE-2026-86950Apple CoreGraphics zero-day CVE-2026-86950
- CriticalCVE-2026-88778Citrix NetScaler ADC and Gateway: two unauthenticated RCE zero-days under active exploitation (CVE-2026-88771, CVE-2026-88772)
Other news entries
- New N-able "4EverAble2Shell" zero-day exploited hours after PoC releasedNewsBleepingComputer
- New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM AccessNewsThe Hacker News
- New Windows SignDrop zero-day gives hackers SYSTEM privilegesNewsBleepingComputer
- Hackers Target N-central Zero-Days as N-able Rushes PatchesNewsSecurityWeek
- N-able Takes N-central Platform Offline After Discovery of 33 FlawsNewsDark Reading
- N-able releases security hotfixes for zero-day vulnerabilitiesNewsBleepingComputer
- November-Patchday: Microsoft stopft erneut mehr als 1.000 SicherheitslöcherNewsGolem.de — Security
- November 2026 Patch Tuesday: 63 Critical Microsoft fixes, plus an Outlook zero day that allows theft of hashed credentialsNewsCSO Online
Source: https://www.securityweek.com/chrome-update-patches-exploited-xml-zero-day-eighth-this-year/
ID