Keep Chrome and Windows updated: CISA lists exploited flaws affecting Chrome’s underlying engine and Windows Shell.

For Chrome, Google confirms an in-the-wild exploit for CVE-2026-87491 and lists a fix in Chrome 153.0.8010.36/.37 for Windows and 153.0.8010.36 for Linux. Update Chrome through its About page and restart it. Google’s advisory

CISA also lists Windows Shell CVE-2026-96951 as exploited and directs users to vendor mitigations. The specific affected Windows versions and update were not independently confirmed here. CISA catalog | Microsoft advisory