HIGH

CVE-2026-3909

Google Chrome 2026-03-13 CVSS v3.1

CVSS

8.8

KEV

Description

Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Summary dbcve.org

Out of bounds write vulnerability in Skia's graphics rendering library in Google Chrome allows remote attackers to perform out of bounds memory access via a crafted HTML page, potentially leading to arbitrary code execution.

Mitigation

Update Google Chrome to version 146.0.7680.75 or later to apply the security patch.

Weakness (CWE)

CWE-787 Out-of-bounds Write

EPSS Score

1.63%

Probability of exploitation in next 30 days

75.1th percentile

References

https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_13.html Release Notes, Vendor Advisory https://issues.chromium.org/issues/491421267 Permissions Required https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-3909 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE