Two Newly Discovered Chrome Zero-Days Exploited in the Wild to Run Malicious Code
Google has issued an urgent security update for the Chrome desktop browser to address two critical zero-day vulnerabilities.
Google has issued an urgent security update for the Chrome desktop browser to address two critical zero-day vulnerabilities.
Identified as CVE-2026-3909 and CVE-2026-3910, these vulnerabilities are classified as high-severity and are confirmed to be actively exploited. It is crucial for users to update their browsers immediately to safeguard against potential system compromise and malicious code execution.
Technical Details of the Vulnerabilities
The update released on Thu, Mar 12, 2026, resolves two significant security vulnerabilities discovered by Google's internal teams on Tue, Mar 10, 2026.
The first vulnerability, CVE-2026-3909, is an "out-of-bounds write" flaw in Skia, an open-source 2D graphics library used by Chrome. This flaw can be exploited to crash the browser or execute arbitrary code.
The second vulnerability, CVE-2026-3910, involves an "inappropriate implementation" in V8, the JavaScript and WebAssembly engine for Chrome. Exploitation of this flaw can lead to bypassing security sandboxes and executing unauthorized scripts.
Google has issued an urgent security update for the Chrome desktop browser to address two critical zero-day vulnerabilities.
Google has restricted access to detailed technical information about these bugs to prevent further exploitation until users have upgraded to a secure version.
To protect systems, users and administrators should prioritize installing the latest patches. The updated versions are being gradually rolled out.
Windows and Mac users should update to Chrome version 146.0.7680.75 or 146.0.7680.76. Linux users should update to Chrome version 146.0.7680.75. Users of other Chromium-based browsers such as Microsoft Edge, Brave, or Vivaldi should apply corresponding vendor updates promptly.
To manually update Google Chrome, go to the Chrome menu, select "Help," and click on "About Google Chrome." The browser will check for the latest update and prompt a restart to apply the patch.
While Google utilizes advanced testing frameworks to detect such vulnerabilities internally, timely user updates remain the most effective measure against active zero-day threats.
Based on reporting by GBHackers.
