CVE-2026-2441: Chrome Zero-Day Enables In-Sandbox Code Execution

Google patched CVE-2026-2441 (CVSS 8.8), a Chrome use-after-free in CSS that enables arbitrary in-sandbox code execution and is being exploited in the wild; organizations should urgently update Chrome to the fixed builds (Windows/macOS Stable 145.0.7632.75+, Linux Stable 144.0.7559.75+, Extended Stable 144.0.7559.177+) and verify browser restarts, prioritize endpoints below fixed versions, and apply short-term compensating controls while tracking Chromium-based vendor updates.