CISA Warns of Google Chromium 0-Day Vulnerability Actively Exploited in Attacks
CISA has added a new Google Chromium zero-day CVE-2026-125350 to its Known Exploited Vulnerabilities (KEV) catalog and says attackers are already using it. It sits in the browser’s XML component and could let a remote attacker run code through a specially …