CVE-2026-3909

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.75 Microsoft Edge (affected versions not specified)

Description An out-of-bounds write exists in the Skia graphics library. This issue allows a remote attacker to perform out-of-bounds memory access by enticing a user to visit a specially crafted HTML page. This can impact the confidentiality, integrity, and availability of protected information. There are reports that this issue has been exploited in the wild.

Recommendations Update Google Chrome to version 146.0.7680.75 or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability for Microsoft Edge.