Patch Released for Actively Exploited Chrome Zero-Day CVE-2026-2441

Taylor Keatsman

Published: February 16, 2026 8:01 AM ET

Patch Released for Actively Exploited Chrome Zero-Day CVE-2026-2441

Google has issued important security updates for its Chrome browser to mitigate a high-severity vulnerability, CVE-2026-2441. This flaw is classified as a use-after-free bug in CSS and has been actively exploited. The announcement was made on February 16, 2026, highlighting the urgency of this issue.

Details of the Vulnerability

The vulnerability, identified with a CVSS score of 8.8, was discovered by security researcher Shaheen Fazim. The flaw allows a remote attacker to execute arbitrary code within a sandbox by crafting a malicious HTML page. It affects Chrome versions prior to 145.0.7632.75.

Current Exploitation Trends

While Google has not disclosed specifics regarding those behind the exploitation or the targets, it has confirmed that exploits for CVE-2026-2441 are in the wild. This situation underlines the ongoing threat posed by browser vulnerabilities, as they constitute an enticing target for cybercriminals due to their widespread installation.

Historical Context

This incident marks the first actively exploited zero-day vulnerability in Chrome that Google has patched in 2026. In the previous year, Google addressed eight actively exploited zero-day vulnerabilities in its browser.

Related Security Updates from Apple

In a related context, Apple has also taken steps to safeguard its users. Last week, it released updates for iOS, iPadOS, macOS, tvOS, watchOS, and visionOS to patch another zero-day flaw (CVE-2026-20700) with a CVSS score of 7.8. This vulnerability was part of an advanced attack that targeted specific individuals running outdated iOS versions.

Recommended Actions for Users

Update Chrome to version 145.0.7632.75/76 for Windows and macOS.
Update to version 144.0.7559.75 for Linux users.
Check for updates by navigating to More > Help > About Google Chrome and selecting Relaunch.
Users of other Chromium-based browsers, including Microsoft Edge and Brave, should also apply updates as they become available.

Ensuring that your browser is up-to-date is crucial for maintaining security against known vulnerabilities. Given the nature of CVE-2026-2441, timely action can help mitigate potential risks associated with this exploit.