Google Fixes Two Chrome Zero-Days Exploited in the Wild Affecting Skia and V8

Google patched two high-severity Chrome zero-day vulnerabilities actively exploited in the wild, affecting the Skia graphics library and V8 engine.

• •CVE-2026-3909 (CVSS 8.8): out-of-bounds write in Skia 2D graphics library, exploitable via a crafted HTML page
• •CVE-2026-3910 (CVSS 8.8): inappropriate implementation in V8 JavaScript/WebAssembly engine allowing arbitrary code execution inside a sandbox
• •Both vulnerabilities were discovered by Google itself on March 10, 2026
• •This marks the third actively exploited Chrome zero-day patched by Google in 2026
• •Fixed in Chrome 146.0.7680.75/76 for Windows/macOS and 146.0.7680.75 for Linux; Chromium-based browsers advised to apply patches when available

This summary was automatically generated by AI based on the original article and may not be fully accurate.