Google patches two Chrome zero-days under active attack. Update now
ID: b00540d5-2d31-5c4d-84c1-79aa03f756aa
STIX ID: report--b00540d5-2d31-5c4d-84c1-79aa03f756aa
Feed Name: Malwarebytes Blog
Threat Score
Google released an out-of-band Chrome update addressing two high-severity zero-day vulnerabilities — CVE-2026-3909 (an out-of-bounds write in Skia) and CVE-2026-3910 (an implementation flaw in the V8 engine) — which can be exploited remotely by visiting malicious webpages; users are advised to update to Chrome 146.0.7680.75/76 (Windows/macOS) or 146.0.7680.75 (Linux) and follow recommended mitigations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.