{“lastseen”:”2026-02-16T06:44:09″,”description”:”\\n\\nGoogle on Friday released security updates for its Chrome browser to address a security flaw that it said has been exploited in the wild.\\n\\nThe high-severity vulnerability, tracked as **CVE-2026-2441** (CVSS score: 8.8), has been described as a use-after-free bug in CSS. Security researcher Shaheen Fazim has been credited with discovering and reporting the shortcoming on February 11, 2026.\\n\\n\\”Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page,\\” according to a description of the flaw in the NIST’s National Vulnerability Database (NVD).\\n\\nGoogle did not disclose any details about how the vulnerability is being exploited in the wild, by whom, or who may have been targeted, but it acknowledged that \\”an exploit for CVE-2026-2441 exists in the wild.\\”\\n\\nWhile Google Chrome is no stranger to actively exploited vulnerabilities, the development once again highlights how browser-based flaws are an attractive target for malicious actors, given that they are installed everywhere and expose a broad attack surface.\\n\\nThe disclosure of CVE-2026-2441 makes it the first actively exploited zero-day in Chrome that Google has patched in 2026. Last year, the tech giant addressed eight zero-day flaws in Chrome that were either actively exploited or demonstrated as a proof-of-concept (PoC).\\n\\nLast week, Apple also shipped iOS, iPadOS, macOS Tahoe, tvOS, watchOS, and visionOS updates to address a zero-day flaw (CVE-2026-20700, CVSS score: 7.8) that had been weaponized as a zero-day to execute arbitrary code on susceptible devices as part of an \\”extremely sophisticated attack\\” targeting specific individuals who were running iOS devices running versions before iOS 26.\\n\\nFor optimal protection, users are advised to update their Chrome browser to versions 145.0.7632.75\/76 for Windows and Apple macOS, and 144.0.7559.75 for Linux. To make sure the latest updates are installed, users can navigate to More \\u003e Help \\u003e About Google Chrome and select Relaunch.\\n\\nUsers of other Chromium-based browsers, such as Microsoft Edge, Brave, Opera, and Vivaldi, are also advised to apply the fixes as and when they become available.\\n\\nFound this article interesting? Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post.\\n”,”published”:”2026-02-16T06:38:00″,”modified”:”2026-02-16T06:38:47″,”type”:”thn”,”title”:”New Chrome Zero-Day (CVE-2026-2441) Under Active Attack \u2014 Patch Released”,”source”:””,”references”:””,”id”:”THN:9BE2C3418F4D95C100812B5911EA584A”,”bulletinFamily”:”info”,”cwe”:null,”cvelist”:[“CVE-2026-20700″,”CVE-2026-2441″],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:8.8,”severity”:”HIGH”,”vector”:”CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:U\/C:H\/I:H\/A:H”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/thehackernews.com\/2026\/02\/new-chrome-zero-day-cve-2026-2441-under.html”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-02-16T06:44:09″,”description”:”\\n\\nGoogle on Friday released security updates for its Chrome browser to address a security flaw that it said has been exploited in the wild.\\n\\nThe high-severity…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,41,12,15,13,7,11,43,5],"class_list":["post-40986","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-cvss-88","tag-exploit","tag-high","tag-news","tag-security","tag-tapic","tag-thn","tag-vulnerability"],"yoast_head":"\n