TLDR Tech / InfoSec
New Chrome Zero-Day (CVE-2026-2441) Under Active Attack — Patch Released
Google patched CVE-2026-2441 (CVSS 8.8), a use-after-free vulnerability in Chrome's CSS engine actively exploited in the wild, marking the first Chrome zero-day of 2026. The flaw allowed remote attackers to execute arbitrary code inside a sandbox via crafted HTML pages in versions prior to 145.0.7632.75. Users should immediately update Chrome on all platforms, and organizations using Chromium-based browsers such as Edge, Brave, Opera, and Vivaldi should apply fixes as they become available.
Read the full story