On February 13, Google released a critical security update for the Chrome browser, addressing the high-severity vulnerability CVE-2026-2441. This vulnerability involves a flaw in CSS, with a CVSS score of 8.8, and has already been exploited in public testing. The vulnerability was first reported by security researcher Shaheen Fazim. In versions of Chrome prior to 145.0.7632.75, remote attackers could execute arbitrary code within the sandbox via a crafted HTML page. This is the first actively pushed zero-day patch for Chrome in 2026, with Google having taken action against only eight related zero-day vulnerabilities last year. Google urges users to update immediately, as specific versions of Chrome for Windows, macOS, and Linux now include the fix.
