Chrome: A 5th Zero-Day Exploited in 2026 — Update Your Browser Now

Google has just shipped an emergency update for Google Chrome to patch a zero-day vulnerability actively exploited by attackers — the fifth since the start of 2026. Tracked as CVE-2026-11645, the flaw can, in some cases, allow remote code execution via a single booby-trapped web page. If you use Chrome (or a Chromium-based browser like Edge, Brave or Opera), here’s why and how to act without delay.

What We Know About the Flaw

Google has confirmed that an exploit already exists “in the wild,” meaning the vulnerability is being used in real attacks before every user is protected. That’s exactly what defines a zero-day: attackers are a step ahead of the patch. The issue was reported to Google by an independent security researcher, and the company responded by rolling out a fix in record time.

As is often the case with browser flaws, the most feared attack scenario is the drive-by: simply visiting a malicious web page is enough for the attacker’s code to run, with no deliberate click or download. Hence the urgency of updating.

The Fixed Versions

Install at least the fixed version matching your system:

• Windows: Chrome 149.0.7827.102
• macOS: Chrome 149.0.7827.103
• Linux: Chrome 149.0.7827.102

If your browser shows an equal or higher version, you’re protected against this flaw.

How to Check and Force the Update

Chrome normally updates itself, but the rollout can take days. To apply it immediately:

• Click the menu (three dots) in the top right, then Help → About Google Chrome.
• Chrome then checks for an update and downloads it automatically.
• Click Relaunch to finish installing. Your open tabs are restored after the restart.
• Then check the version number shown on that same page.

The key point: an update is only truly active once you relaunch the browser. Many users download the fix but leave Chrome open for days, staying vulnerable without knowing it. So get into the habit of restarting Chrome regularly.

What About Edge, Brave or Opera?

These browsers run on the same Chromium engine and are therefore affected by the same flaw. Each vendor ships its own fix: check for updates in Settings → About in your browser, and relaunch it. Don’t assume “it’s only Chrome.”

What It Means for You

This episode highlights an underlying trend: browsers have become the number-one target for attackers, because that’s where we spend most of our time online. Five zero-days patched in barely more than six months is a pace that underscores a simple rule: always keep your browser up to date, enable automatic updates, and relaunch it regularly so the fixes take effect. It’s one of the most effective and cheapest security measures for an individual.

Was your Chrome up to date? Check now, and follow Wanda-techs to be alerted about the next critical security updates.