Home / Mar 15, 2026 / Story
1
#1 The Hacker News general March 13, 2026 at 09:17 UTC

Google Fixes Two Chrome Zero-Days Exploited in the Wild Affecting Skia and V8

By [email protected] (The Hacker News)

AI Summary

Google patched two high-severity Chrome zero-day vulnerabilities (CVE-2026-3909 in Skia graphics library with CVSS 8.8) that are being actively exploited in the wild. The Chrome 146 update addresses an out-of-bounds write flaw that allows remote attackers to perform memory access via crafted HTML and a second V8 engine vulnerability.

Relevance score: 95.0/100

# More from March 15