A zero-day vulnerability is a flaw in software that goes undiscovered by the developers, which can then be found and exploited by hackers before anyone gets wind of it. You might’ve heard about zero-day flaws in Chrome because it happens a lot—oh boy, does it happen a lot. Well, the first one that Google has discovered in 2026 is now patched, so go update your browser right now.
The update issued on Friday had just one fix for error CVE-2026-2441, a “use after free” vulnerability in CSS. This type of exploit happens when a program tries to use system memory that it has already released back to the system. It’s a common issue for web browsers, and Chrome in particular because it’s a real memory hog.
To Google’s credit, the company patched this vulnerability just two days after it was discovered by security researcher Shaheen Fazim. And yes, you absolutely should patch this right away. Google says that the company is “aware that an exploit for CVE-2026-2441 exists in the wild.” That means it’s being actively attacked, right-the-heck now.
You can update most versions of Chrome right in the browser by navigating to Help > About Google Chrome, or you can download the latest version manually right here.