Chrome 0-Day, Angular XSS, & Firefox Patches: March 2026 Review

High-Severity Angular XSS Flaw Bypasses Built-In Sanitization (CVE-2026-32635)

• A high-severity Cross-Site Scripting (XSS) vulnerability, identified as CVE-2026-32635, has been discovered in Angular, affecting thousands of web applications by bypassing built-in sanitization mechanisms.
• This critical flaw enables attackers to inject malicious JavaScript into web pages, potentially leading to unauthorized data access, session hijacking, and website defacement.
• Developers maintaining Angular applications are urged to update to patched versions, such as Angular 17.2.15, to mitigate the significant risks associated with this XSS vulnerability.

Source: SecurityOnline.info | Date: March 18, 2026

CISA Warns of Actively Exploited Chrome Zero-Day Vulnerabilities

• The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning concerning multiple zero-day vulnerabilities in Google Chrome that are under active exploitation in the wild.
• These critical flaws present a significant risk, potentially enabling remote code execution and data exfiltration through compromised browser instances.
• Google has released emergency security updates, and all Chrome users across Windows, macOS, and Linux are strongly advised to update to version 123.0.6312.105 or later immediately.

Source: Cybersecurity News | Date: March 28, 2026

References

1. More reasons to love Firefox: What’s new now, and what’s coming soon - Mozilla Blog
2. High-Severity Angular XSS Flaw Bypasses Built-In Sanitization - SecurityOnline.info
3. CVE-2026-32635 - NVD/MITRE
4. AI-Driven Phishing Campaign Uses Browser Permissions to Harvest Sensitive Data - The Cyber Express
5. CISA Warns of Chrome 0-Day Vulnerabilities Exploited in Attacks - Cybersecurity News