CVE-2026-3910: Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
Chromium: CVE-2026-3910 Inappropriate implementation in V8
Other sources
Google Chromium V8 contains an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
— CISA
Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
— NVD
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2026-3910 exists in the wild.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 146.0.7680.75 - Compensating control
Follow applicable BOD 22-01 guidance for cloud services; discontinue use of the product if mitigations are unavailable.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3910?
CVE-2026-3910 has a high security severity rating due to its potential to allow remote code execution.
How do I fix CVE-2026-3910?
To fix CVE-2026-3910, update Google Chrome to version 146.0.7680.75 or later.
What systems are affected by CVE-2026-3910?
CVE-2026-3910 affects Google Chrome versions prior to 146.0.7680.75 on all supported platforms.
What can an attacker do with CVE-2026-3910?
An attacker exploiting CVE-2026-3910 can execute arbitrary code inside a sandboxed environment via a specially crafted HTML page.
Is CVE-2026-3910 already patched?
Yes, CVE-2026-3910 has been patched in Google Chrome version 146.0.7680.75.