Google fixes the eighth actively exploited Chrome zero-day of 2026
2026-11-10T14:51:37Z•41e4f48bbe45b9ea11e9d203fea657e04bd8ea7e6d3437ebb54e8c8efe19acf7
CVE-2026-125350GitHub supply-chain abuseGoogle ChromeIran-linked activityNAS compromiseOT securityPlex2ShellQNAPV8actively exploited zero-daycloud securitycredential theftcritical infrastructurecyber threat intelligencedata breachindustrial control systemsindustrial refrigerationmalware distributionpersonal data exposureransomware/data extortionuse-after-free
What happened
Security Affairs RSS items report an actively exploited Chrome V8/XML use-after-free zero-day (CVE-2026-125350), a potential cloud data exposure affecting 7.7 million Iris Ohyama customers, exploitation of Plex2Shell flaws against QNAP NAS devices, attacks targeting industrial refrigeration controllers, malware distributed through fake GitHub security tools, and alleged Iran-linked attacks on French supermarket refrigeration systems. Additional items cover a confirmed Brenner Base Tunnel data breach and cyber threat intelligence newsletters.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 41e4f48bbe45b9ea11e9d203fea657e04bd8ea7e6d3437ebb54e8c8efe19acf7
- Enrichment time
- 2026-11-10T14:51:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.