Critical Chrome Zero-Day Exploit Code Goes Public After Active Attacks

Critical Chrome vulnerability CVE-2026-2441 actively exploited; update to version 145.0.7632.75 to stay protected.

Mar 2, 2026

ON THIS PAGE

Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our privacy policy.

Security researchers have published exploit code for CVE-2026-2441, a critical Chrome vulnerability that Google confirmed is being actively exploited by attackers. The zero-day flaw affects Chrome's Blink rendering engine and allows hackers to execute malicious code just by tricking users into visiting a compromised website.

Google rushed out an emergency patch within two days after researcher Shaheen Fazim reported the bug on February 11, 2026. The vulnerability stems from a use-after-free error in Chrome's CSS font handling that can crash the browser and potentially lead to full system compromise when combined with other exploits.

The U.S. CISA has added this flaw to its known exploited vulnerabilities list. Chrome users need to update immediately to version 145.0.7632.75 or later.

Source: Cybersecurity News

Have questions about protecting your software?

Our escrow experts are standing by to help.

Book a free demo