Google Chrome Emergency Patch: CVE-2026-1891 Zero-Day Used in Targeted Attacks
Google released an emergency update for Chrome addressing CVE-2026-1891, a type confusion vulnerability in the V8 JavaScript engine being actively exploited in targeted attacks. Update to version 134.0.6998.177 or later immediately.
Vulnerability Details
Google released an emergency security update for Chrome on April 1, 2026, addressing CVE-2026-1891, a type confusion vulnerability in Chrome's V8 JavaScript engine. Type confusion vulnerabilities occur when code accesses a resource using an incompatible type, which can lead to memory corruption and ultimately arbitrary code execution. This vulnerability is being actively exploited in targeted attacks — Google's Threat Analysis Group (TAG) confirmed exploitation before the patch was released. The vulnerability affects Chrome on Windows, macOS, and Linux.
Who Is Being Targeted
Google's Threat Analysis Group reported that CVE-2026-1891 is being exploited in targeted attacks, suggesting the initial exploitation was focused on high-value targets rather than broad opportunistic attacks. However, once a zero-day is publicly disclosed and patched, exploit code typically becomes widely available within days, enabling less sophisticated attackers to use it in broader campaigns. Organizations should treat this as an urgent update regardless of whether they believe they are a targeted organization.
How to Update
To update Chrome manually, click the three-dot menu in the upper right corner, go to Help > About Google Chrome. Chrome will automatically check for and download the latest update. After the download completes, click "Relaunch" to restart Chrome and apply the update. To verify you have the correct version, the About Chrome page should show version 134.0.6998.177 or later. For organizations managing multiple endpoints, deploy the update through your RMM tool or software deployment system. Microsoft Edge and other Chromium-based browsers will receive similar updates — check for updates in those browsers as well.
- Update Chrome to version 134.0.6998.177 or later immediately
- Enable automatic updates in Chrome settings to prevent future delays
- Other Chromium-based browsers (Edge, Brave) will also need updates — check for updates in those browsers too
- Restart Chrome after updating to ensure the update takes effect
- Deploy the update via your RMM tool if managing multiple endpoints
Need Help With This Threat?
Our San Antonio security team can assess your exposure, apply patches, and protect your business before attackers strike.
Stay ahead of the next threat
Get weekly security alerts — breaches, patch updates, compliance news, and threat intel — delivered free to your inbox every week.