Back to Feed
Zero-dayMar 13, 2026

Google Fixes Two Chrome Zero-Days Exploited in the Wild Affecting Skia and V8

Google released emergency security updates for Chrome to patch two high-severity zero-day vulnerabilities being actively exploited in the wild. The vulnerabilities affect the Skia graphics library and V8 JavaScript engine, with CVE-2026-3909 allowing remote attackers to perform out-of-bounds memory access through crafted HTML.

Summary

Google released emergency security updates for Chrome to patch two high-severity zero-day vulnerabilities being actively exploited in the wild. The vulnerabilities affect the Skia graphics library and V8 JavaScript engine, with CVE-2026-3909 allowing remote attackers to perform out-of-bounds memory access through crafted HTML.

Indicators of Compromise

  • cve — CVE-2026-3909