Please Update Chrome As Soon As Possible to Fix This Serious Security Vulnerability.
If you use Google Chrome, you should install the latest update as soon as possible. Google has released a patch for a serious vulnerability that was actively exploited by attackers—the first zero-day vulnerability in Chrome in 2026.
What does the Google Chrome update fix?
The latest vulnerability, reported as CVE-2026-2441 , is a use-after-free vulnerability in CSSFontFeatureValuesMap, the implementation of the CSS font feature in Chrome. A use-after-free vulnerability is an error in which an application attempts to use memory after it has been freed by the system. This type of error allows attackers to execute code, escalate privileges, cause application or system crashes, and leak sensitive data.
Vulnerability CVE-2026-2441 allows “a remote attacker to execute arbitrary code within a sandbox using a specially crafted HTML page.” Essentially, this means malicious HTML content can execute code within a Chrome tab, extension, or plugin. As Malwarebytes explains , this is dangerous because attackers can see or modify everything the sandboxed browser tab (or sandbox) has access to, enabling actions like credential harvesting and traffic redirection—even if this doesn’t allow them to escape the sandboxed operating system.
Google stated that this vulnerability was exploited by attackers, but provided no specific details about how. The discovery was attributed to Shahin Fazim.
What Chrome users need to do
On February 13, Google released an update to the stable channel that fixes this vulnerability. The latest versions of Chrome are 145.0.7632.75/76 for Windows and macOS and 144.0.7559.75 for Linux, so you should make sure you have the latest version. Go to the Chrome menu and select “About Google Chrome” to check which version you have.
Chrome updates automatically when you close and reopen the browser, but if you don’t do this regularly, keep an eye on pending updates in the upper-right corner of the browser window. To apply these updates immediately, click the three dots and select the first menu item. A restart of Chrome will be required to complete the update.