SECURITYTHE REGISTER
Chrome's zero-day Whac-A-Mole continues with fifth exploited bug of the year
Google patched the fifth actively exploited Chrome zero-day of 2026, CVE-2026-11645, an out-of-bounds memory access flaw in the V8 JavaScript engine. The vulnerability was reported by researcher '303f06e3' and earned a $55,000 bounty, with technical details withheld to prevent further exploitation.
Mentioned
Related Signal
Adjacent reporting
- Hackers exploiting Acrobat Reader zero-day flaw since December
- Critical cPanel and WHM bug exploited as a zero-day, PoC now available
- Adobe rolls out emergency fix for Acrobat, Reader zero-day flaw
- Adobe fixes PDF zero-day security bug that hackers have exploited for months
- Google patches new Chrome zero-day flaw exploited in the wild
- Adobe Reader Zero-Day Exploited via Malicious PDFs Since December 2025