Zero-dayMar 13, 2026
Google Fixes Two Chrome Zero-Days Exploited in the Wild Affecting Skia and V8
Google released emergency security updates for Chrome to patch two high-severity zero-day vulnerabilities being actively exploited in the wild. The vulnerabilities affect the Skia graphics library and V8 JavaScript engine, with CVE-2026-3909 allowing remote attackers to perform out-of-bounds memory access through crafted HTML.
Summary
Google released emergency security updates for Chrome to patch two high-severity zero-day vulnerabilities being actively exploited in the wild. The vulnerabilities affect the Skia graphics library and V8 JavaScript engine, with CVE-2026-3909 allowing remote attackers to perform out-of-bounds memory access through crafted HTML.
Indicators of Compromise
- cve — CVE-2026-3909