CVE-2026-3910CISA KEV
Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
CISA lists this Google Chromium V8 vulnerability as known exploited. The vendor's advisory has the fixed versions.
CISA catalog record
Google Chromium V8 contains an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
- Product
- Chromium V8
- Added to KEV
- 13 Mar 2026
- Federal remediation due
- 27 Mar 2026
- Known ransomware use
- Not reported