US EditionPublished • loading... • Updated
Google rushes Chrome update to fix zero-days under attack
The update addresses critical memory corruption flaws in Chrome's core components with one exploit already active and another fix pending, marking the third zero-day patched in 2026.
- Google released an emergency Chrome Stable update on March 12 to patch two zero-day vulnerabilities that attackers were actively exploiting before the fixes arrived.
- CVE-2026-3910 is an inappropriate implementation in the V8 JavaScript and WebAssembly engine responsible for executing webpage scripts, while CVE-2026-3909 is an out-of-bounds write flaw in Skia, Chrome's graphics library rendering web content.
- The Google Threat Analysis Group reported CVE-2026-3910 on March 10, though Google initially planned simultaneous patches; the fix for CVE-2026-3909 is now expected in a future update.
- Chrome users should update to version 146.0.7680.75/76 for Windows and Mac, or 146.0.7680.75 for Linux, and restart their browser to complete installation as rollout continues over several days or weeks.
- These patches represent Chrome's second and third zero-day fixes in 2026 following a February patch for CVE-2026-2441, while Google paid $17 million to 747 security researchers through its Vulnerability Reward Program in 2025.
Insights by Ground AI
Podcasts & Opinions
20 Articles
20 Articles
Google launched an urgent update for Chrome. This corrects two zero-day vulnerabilities explored in real attacks. The research giant now recommends that users install the most...
·Portugal
Read Full Article
Both are actively exploited by attackers.
·Budapest, Hungary
Read Full Article
Coverage Details
Total News Sources20
Leaning Left0Leaning Right2Center3Last UpdatedBias Distribution60% Center
Bias Distribution
- 60% of the sources are Center
60% Center
C 60%
R 40%
Factuality
To view factuality data please Upgrade to Premium
