Critical Chrome Security Flaws Threaten Billions of Users Worldwide

Google released patches for two actively exploited Chrome zero-day vulnerabilities — CVE-2026-3909 (an out-of-bounds write in the Skia graphics library) and CVE-2026-3910 (an inappropriate-implementation flaw in the V8 JavaScript engine) — which could cause crashes or enable arbitrary code execution and potentially sandbox escapes; organizations are advised to apply updates, monitor EDR/XDR for unusual browser behavior, restrict high-risk browsing on privileged systems, and use isolation and application control to reduce risk.