Story perspectives

Google Rushes Chrome Update to Fix Serious Zero-Day Flaws

3/17/2026

Summary

Story summary

Google issued an urgent Chrome update to fix two high-severity zero-day vulnerabilities actively exploited.
The vulnerabilities are CVE-2026-3909 and CVE-2026-3910, affecting the Skia graphics library and the V8 engine.
The update is available for Windows, macOS, and Linux, but may take days to reach 3.5 billion users.
Google is withholding detailed information until most users apply the fix, marking the second and third 2026 zero-day vulnerabilities.

1 of 1

Story summary

Google issued an urgent Chrome update to fix two high-severity zero-day vulnerabilities actively exploited.
The vulnerabilities are CVE-2026-3909 and CVE-2026-3910, affecting the Skia graphics library and the V8 engine.
The update is available for Windows, macOS, and Linux, but may take days to reach 3.5 billion users.
Google is withholding detailed information until most users apply the fix, marking the second and third 2026 zero-day vulnerabilities.