The first loophole of the year. 🚨

Google released an emergency update, plugging the first Zero-Day vulnerability of 2026 that is being exploited in cyberspace. This vulnerability has the code CVE-2026-2441, classified as CVSS Violence 8.8/10 Points. If successfully attacked, the hacker can execute malicious code inside the browser immediately.

.

CVE-2026-2441 was discovered and reported by security researcher Shaheen Fazim on Feb 11, 2026, as a Use-After-Free type vulnerability caused by running a memory that has already been erased, opening a box for unwannabes to insert malicious code into it instead.

.

The affected point is CSSFontFeatureValuesMap, which is part of the advanced font management system in Chrome. If a hacker creates a specially designed page, such as using a specialized font or CSS code, it can cause the browser to crash and run dangerous code immediately. Without the need for the victim to click to download any file, just open the page, there is a chance of being hit.

.

Google confirmed that the vulnerability was actually exploited on a large scale, despite not disclosing details of the incident, to prevent it from being redeployed before most users update it.

.

Patches have already been released in the latest versions, including:

- Windows / macOS: 145.0.7632 75 or .76

- Linux: 144.0.7559 75

.

Anyone who has not updated Chrome is recommended to go to chrome: / / settings / help and wait for the system to check and download the automatic update. Then press close and open the new Chrome, it will be protected.

.

Source: bleepingcomputer

# IT should know # IT News # Includes IT matters # IT # Trending