Skip to news
JQJO
Latest

United States: Google patches actively exploited Chrome zero-day | JQJO

United States: Google patches actively exploited Chrome zero-day

Tap title to read story

0:00 / 1:54

United States – Google has released an emergency security update for its Chrome web browser to fix a high-severity zero-day vulnerability, tracked as CVE-2026-11645, that is being actively exploited in the wild. Announced in a security advisory on June 9, 2026, the patch is part of a broader release that addresses 74 vulnerabilities across Chrome’s codebase and marks the fifth zero-day the company has fixed so far in 2026. CVE-2026-11645 is an out-of-bounds read and write flaw in V8, Chrome’s high-performance JavaScript engine, and can be triggered when a user visits a specially crafted HTML page, allowing a remote attacker to execute arbitrary code within the browser sandbox and potentially gain unauthorized access to user data or systems.

United States – Google said it is aware of existing exploit code for the flaw and confirmed that attackers have already used the vulnerability in real-world campaigns, but it is withholding detailed technical and targeting information to limit further abuse until most users apply the fix. The vulnerability was reported on April 27, 2026, by an anonymous researcher, who received a $55,000 bounty through Google’s Chrome Vulnerability Reward Program. The patch is included in Chrome version 149.0.7827.102/.103 for Windows and macOS and 149.0.7827.102 for Linux, and is rolling out globally. Google urged users to manually check the “About Chrome” page to ensure immediate updating, noting that Chromium-based browsers such as Microsoft Edge, Brave and Opera will also need to integrate the upstream fixes to protect their users.

Published · Published by JQJO

Published by JQJO Editorial Desk · AI assisted

More context

Timeline

  1. Early 2026 Google addresses multiple Chrome zero-days
  2. Early 2026 Researchers identify new V8 memory flaw
  3. June 9, 2026 Google issues emergency Chrome update
  4. June 9, 2026 Security advisory confirms active exploitation
  5. June 9, 2026 Patch includes seventy-four total fixes
  6. June 9, 2026 Google withholds detailed exploit information
  7. Following days Users urged to update Chrome promptly

Why it matters

This Chrome flaw could let hackers access your data. It's been used in real-world attacks. If you use Chrome, or browsers like Edge, Brave, or Opera, you're at risk. Check your browser version today.

JQJO Editorial Desk · Human reviewed · AI assisted. Report a correction.

Editorial policy and corrections · Our team

Bombardier Expands U.S. Operations

Tap title to read story

0:00 / 0:37

TV Users Debloat with Vibe Coding

Tap title to read story

0:00 / 0:52

Knicks Ring Dispute Sparks Cybersecurity Lesson

Tap title to read story

0:00 / 0:29

Fired OpenAI Researchers Interview After Dismissal

Tap title to read story

0:00 / 0:22

PHP Vulnerability Sparks Global Response

Tap title to read story

0:00 / 0:47

Cybersecurity Threats Urge Infrastructure Patch

Tap title to read story

0:00 / 0:34

Xi Tightens Discipline Ahead of 2027 Reshuffle

Tap title to read story

0:00 / 0:38

Tom Skerritt Dies at Ninety‑Three

Tap title to read story

0:00 / 0:36

Teenage Girl Killed in Arcadia Home; Suspected Shooter Fled and Attempted Suicide in Pasadena

Tap title to read story

0:00 / 0:10

Sixers Complete 29‑Point Comeback to Beat Cavaliers 114‑106

Tap title to read story

0:00 / 0:28

JQJO

Find your next story

Search JQJO’s current coverage.