Google patched Chrome zero-day CVE-2026-125350 on 9 November 2026, a high-severity use-after-free in the browser XML component that is already exploited in the wild. If that browser opens wp-admin, a hosting panel, webmail, or a payment dashboard, update it and relaunch before the next login.