Vulnerabilities CVE-2026-3909

CVE-2026-3909

Medium

Open

KEV

TLP:CLEAR

Google Skia Out-of-Bounds Write Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Google — Skia — Google Skia contains an out-of-bounds write vulnerability that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.

Details

EPSS Score ⓘ: 1.63%

74th percentile
Confidence: 100%
CISA KEV
Date Added: Mar 13, 2026
Patch Due: Mar 27, 2026
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.