Firetruck

CVE-2026-3909

KEV
Updated Mar 24, 2026 · PUBLISHED
View KEV entry →

Description

Google Skia contains an out-of-bounds write vulnerability that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
ChromeGoogle / Chrome>= 146.0.7680.75, < 146.0.7680.75affected