NewsSecurityWeek
Chrome Update Patches Exploited XML Zero-Day, Eighth This Year
Teaser from the source
The high-severity use-after-free in Chrome’s XML component was reported anonymously on November 6 and is already exploited in attacks. The post Chrome Update Patches Exploited XML Zero-Day, Eighth This Year appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekMore on Zero-Day
Other advisories
- Highpwn_watch:d-link-dgs-3130-ddp-firmware-zero-days-nov-2026D-Link DGS-3130-30TS interim advisory: multiple unpatched DDP and firmware zero-days (SAP10523)
- CriticalCVE-2026-76418Cisco ASA and FTD zero-day CVE-2026-76418 exploited to crash SSL VPN firewalls
- CriticalCVE-2026-114625Arista VeloCloud Orchestrator zero-day CVE-2026-114625 exploited in attacks
- CriticalCVE-2026-108398Windows Shell Mark-of-the-Web bypass zero-day (CVE-2026-96951)
- CriticalCVE-2026-111357Ivanti Connect Secure zero-day chain (CVE-2026-104935) exploited for root
- CriticalCVE-2026-104286FortiMail unauthenticated file-write zero-day CVE-2026-104286
- CriticalCVE-2026-86950Apple CoreGraphics zero-day CVE-2026-86950
- CriticalCVE-2026-88778Citrix NetScaler ADC and Gateway: two unauthenticated RCE zero-days under active exploitation (CVE-2026-88771, CVE-2026-88772)
Other news entries
- Check Point warns of zero-day flaw exploited for root accessNewsBleepingComputer
- Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’NewsSecurityWeek
- Hackers Exploit New N-central Zero-Day Hours After PoC PublicationNewsSecurityWeek
- New N-able "4EverAble2Shell" zero-day exploited hours after PoC releasedNewsBleepingComputer
- New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM AccessNewsThe Hacker News
- New Windows SignDrop zero-day gives hackers SYSTEM privilegesNewsBleepingComputer
- Hackers Target N-central Zero-Days as N-able Rushes PatchesNewsSecurityWeek
- N-able Takes N-central Platform Offline After Discovery of 33 FlawsNewsDark Reading
Source: https://www.securityweek.com/chrome-update-patches-exploited-xml-zero-day-eighth-this-year/
ID