THREAT LEVEL - HIGH
17-02-2026
High Level – New Google Chrome’s Zero-Day Actively Exploited in the Wild
Threat Level Description
IthacaLabs has maintained the Threat Level (High) adding a new observation:
An attack is highly likely. Addressing the broad nature of the threat in order to reach an acceptable risk level, requires additional and sustainable protective security measures combined with specific business and geographical vulnerabilities and judgments.
Description
We have observed a new high-severity zero-day vulnerability in Google Chrome’s CSS component that is actively exploited in the wild.
The vulnerability, tracked as CVE-2026-2441 (CVSS score: 8.8), is a use-after-free flaw in CSS that allows remote attackers to execute arbitrary code inside the browser’s sandbox via a crafted HTML page, requiring user interaction such as visiting a malicious site.
An exploit has been confirmed as actively circulating in the wild, though details regarding the attackers, targets, and specific exploitation methods remain undisclosed. A patch has since been released, marking this as the first zero-day fix of 2026 for the affected browser.
Our Advisory and Managed Services, including our Security Operations and Technology Resilience lines, can help safeguard your organization against such threats.
Through proactive monitoring, threat detection, and incident response, our services are designed to keep your systems secure, resilient, and prepared for evolving cyber risks. We advise all organizations to remain vigilant and regularly review their cybersecurity postures.
Affected Products:
- Chrome prior to 145.0.7632.75 — Windows & macOS
- Chrome prior to 144.0.7559.75 — Linux
- Chromium-based browsers (patch when available):
- Microsoft Edge
- Brave
- Opera
- Vivaldi
Recommendation(s):
It is highly recommended to immediately update to the latest Google Chrome version.
Until fully updated, organizations and users should consider implementing the following mitigation measures:
- Avoid visiting untrusted or suspicious websites to minimize exposure to crafted HTML pages
- Enable automatic browser updates and deploy via enterprise management tools for managed environments
- Monitor browser processes, network traffic, and system logs for indicators of sandbox escapes or unusual code execution
- Conduct vulnerability scanning and threat hunting on endpoints to identify potential compromises from prior exploitation
You should understand the importance of applying security updates with urgency, regardless of organizational size. Implementing an effective patch management strategy, enabling comprehensive event logging, and actively monitoring security events are critical to protecting business-critical assets. A comprehensive risk management approach should include regular penetration testing, at least annually and after significant system changes, to ensure continued compliance with security best practices and industry regulations.
Threat Level Description:
Threat Level: High – An attack is highly likely. Addressing the broad nature of the threat in order to reach an acceptable risk level, requires additional and sustainable protective security measures combined with specific business and geographical vulnerabilities and judgments.
References:
