← Back to browse · API

CVE-2026-3909

Severity
HIGH
CVSS
8.8
EPSS
0.01629
Risk score
60.77
CISA KEV
Yes
PoC
No
Published
2026-03-12
Modified
2026-03-24
First seen
2026-08-07
Aliases
EUVD-2026-11734, GHSA-VMC5-XPP6-2J82
Products
Google:Chrome 146.0.7680.75 <146.0.7680.75, Google:Skia
Sources
cisa.gov CVE-2026-3909
euvd EUVD-2026-11734

Description

Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

References