Google patches actively exploited Chrome XML-processing zero-day

Google patched actively exploited CVE-2026-125350, a use-after-free in XML processing/libxslt; update desktop Chrome to fixed versions and restart, and check Chromium-based browsers for vendor updates. Attack context, targets, and actors remain undisclosed; duplicate coverage should not be reshared.