Update Chrome ASAP to Patch the Latest Zero-Day

If you are using Google Chrome, you should install the latest update as soon as possible. Google has released a patch for a high-severity flaw that has been actively exploited in the wild: the first Chrome Zero Day in 2026.

What the Google Chrome patch fixes

The latest flaw, listed as CVE-2026-2441, is a use-after-free vulnerability in CSSFontFeatureValuesMap, the implementation of Chrome’s CSS font feature. A use-after-free vulnerability is one in which an application attempts to use memory after it has been released to the system. This type of bug allows attackers to execute code, elevate privileges, cause application or system crashes, and disclose sensitive data.

CVE-2026-2441 would allow “a remote attacker to execute arbitrary code in a sandbox via a crafted HTML page.” Essentially, this means that malicious HTML content could execute code within a Chrome tab, extension, or plugin. As Malwarebytes explains, this is dangerous because attackers can see or modify anything that the isolated browser tab (sandbox) can access, allowing actions like credential harvesting and traffic rerouting, although it cannot escape and impact the entire operating system.

Google said this vulnerability was wildly exploited, but provided no specific details on how. The discovery was attributed to Shaheen Fazim.

What Chrome Users Should Do

Google released a stable channel update on February 13 with a fix for this flaw. The latest versions of Chrome are 145.0.7632.75/76 for Windows and macOS and 144.0.7559.75 for Linux, so you’ll want to make sure you’re up to date. Go to the Chrome menu and select About Google Chrome to check which version you are using.

Chrome updates automatically when you close and reopen the browser, but if you don’t do this regularly, keep an eye on pending updates in the upper right corner of your browser window. Apply these updates immediately by tapping the three dots and selecting the first menu item. Chrome will need to restart to complete the update.