highclosedpatched
Chrome zero-days CVE-2026-3909 (Skia) and CVE-2026-3910 (V8)
› Google Chrome / Chromium
Get an email when a new major security incident drops. No spam, unsubscribe any time.
- started
- Mar 1, 2026
- closed
- Mar 31, 2026
- CVEs
- 2
- sources
- 1
## summary
March 2026 Chrome updates fixed two actively exploited zero-days: CVE-2026-3909 (out-of-bounds write in Skia) and CVE-2026-3910 (inappropriate implementation in V8).
severity: High (CVSS 8.8 each); exploited in the wild
## cve ids[2]
## affected
- Pre-patch March 2026 Stable builds
## fixed in
- March 2026 Chrome Stable updates
## news & write-ups[1]
## notes & caveats
Verify primary vendor advisory for exact fixed versions; facts taken from public sources listed in links.
