Tuesday, August 11, 2026
LIVEThe Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///The Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///
Subscribe
Cyber Security
Independent · Digital
Thehackingpost
CybersecurityAI-assisted

Chrome Zero-Day Vulnerabilities Actively Exploited in the Wild to Execute Malicious Code

Google has released a critical security update for its Chrome browser to address two high-severity zero-day vulnerabilities currently being exploited. The stable channel has been updated to version 146.0.7680.75/76 for Windows and macOS, and…

Google has released a critical security update for its Chrome browser to address two high-severity zero-day vulnerabilities currently being exploited. The stable channel has been updated to version 146.0.7680.75/76 for Windows and macOS, and 146.0.7680.75 for Linux. The update will be rolled out to users over the upcoming days and weeks.

Both vulnerabilities, reported internally by Google's security team on March 10, 2026, have been rated as high severity, highlighting the immediate risk to Chrome users globally.

CVE-2026-3909: Out-of-Bounds Write in Skia

The first vulnerability, CVE-2026-3909, is an out-of-bounds write issue within Skia, the open-source 2D graphics engine used by Chrome's rendering pipeline. Such vulnerabilities allow attackers to overwrite adjacent memory, which can potentially lead to arbitrary code execution or application crashes. Exploiting this flaw in a browser context can enable attackers to bypass sandbox protections and execute malicious code.

CVE-2026-3910: Inappropriate Implementation in V8

The second issue, CVE-2026-3910, involves an inappropriate implementation in V8, Chrome's JavaScript and WebAssembly engine. Flaws in V8 are often targeted by attackers due to the frequent execution of JavaScript during web browsing, providing numerous opportunities for exploitation. An attacker could design a malicious webpage to trigger this flaw, executing code within the browser process.

Google has released a critical security update for its Chrome browser to address two high-severity zero-day vulnerabilities currently being exploited.
Sean Avery · Thehackingpost

Google has confirmed the existence of exploits for both CVE-2026-3909 and CVE-2026-3910, marking this update as critical for both individuals and organizations. Detailed technical information regarding these vulnerabilities remains restricted until a majority of users have applied the patch to prevent further exploitation.

To mitigate exposure, users and administrators should update Chrome immediately. To manually update:

Open Chrome and go to Menu → Help → About Google Chrome. Chrome will automatically check for and apply the latest update. Restart the browser to complete the installation.

Advertisement

Organizations using enterprise policies for Chrome deployments should prioritize the update to version 146.0.7680.75/76 across their environments. Due to the active exploitation of these vulnerabilities, waiting for the automatic rollout is not advisable for high-risk environments.

Based on reporting by Cyber Security News.

AI transparency. This article was produced with the assistance of artificial intelligence and published under human editorial oversight. AI systems can make mistakes. Read how we use AI (EU AI Act, Art. 50).
Related Stories