bug-bounty457
google360
microsoft310
facebook264
xss250
apple176
malware175
rce165
exploit140
cve111
account-takeover104
bragging-post102
phishing84
privilege-escalation82
csrf81
supply-chain68
stored-xss65
authentication-bypass64
dos62
browser60
reflected-xss57
react52
cloudflare50
reverse-engineering49
access-control48
input-validation48
cross-site-scripting48
aws47
node46
docker46
smart-contract45
ethereum44
sql-injection43
defi43
web-security43
ssrf42
web342
web-application41
writeup37
oauth37
race-condition36
burp-suite35
info-disclosure34
idor34
vulnerability-disclosure34
auth-bypass33
cloud33
html-injection33
buffer-overflow32
smart-contract-vulnerability32
0
3/10
Google released emergency Chrome patches for two actively exploited zero-days: CVE-2026-3909 (out-of-bounds write in Skia graphics library) and CVE-2026-3910 (inappropriate implementation in V8 JavaScript engine). Both vulnerabilities are being actively exploited in the wild, marking Chrome's third zero-day under attack in 2026.
zero-day
chrome
memory-corruption
out-of-bounds-write
skia
v8
javascript-engine
webassembly
active-exploitation
emergency-patch
browser-security
CVE-2026-3909
CVE-2026-3910
CVE-2026-2441
Google
Chrome
Skia
V8
0
3/10
Google released emergency patches for two actively exploited Chrome zero-days: CVE-2026-3909 (out-of-bounds write in Skia graphics library enabling code execution) and CVE-2026-3910 (inappropriate V8 JavaScript engine implementation). Both vulnerabilities were discovered and patched by Google within two days of discovery.
zero-day
chrome
cve-2026-3909
cve-2026-3910
out-of-bounds-write
code-execution
v8-engine
skia-graphics
javascript-engine
browser-security
actively-exploited
emergency-patch
CVE-2026-3909
CVE-2026-3910
CVE-2026-2441
Google
Skia
V8
Chrome
Google Threat Analysis Group
BleepingComputer