2 CVEs
HIGH
CVSS 8.8
Google Chrome Out of Bounds Memory Access
2026-03-13
CVE-2026-3909
HIGH
POC
KEV
PATCH
THREAT
Google Chrome's Skia graphics library contains an out-of-bounds write (CVE-2026-3909, CVSS 8.8) enabling remote attackers to perform memory corruption through crafted HTML pages. KEV-listed with public PoC and patches available, this vulnerability in the core graphics rendering engine affects all Chromium-based browsers.
8.8
CVSS
0.1%
EPSS
CVE-2026-3910
HIGH
POC
KEV
PATCH
THREAT
Chrome's V8 JavaScript engine contains an inappropriate implementation (CVE-2026-3910, CVSS 8.8) that allows remote attackers to execute arbitrary code within the browser sandbox via crafted HTML pages. KEV-listed with public PoC, this V8 vulnerability affects all Chromium-based browsers and enables drive-by exploitation through any web page containing malicious JavaScript.
8.8
CVSS
0.1%
EPSS