CVE-2026-3910

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.75 Microsoft Edge (affected versions not specified)

Description An inappropriate implementation in the V8 JavaScript engine, related to improper restriction of operations within the bounds of a memory buffer and incorrect code generation management, allows a remote attacker to execute arbitrary code inside a sandbox. This is achieved by enticing a user to visit a specially crafted HTML page. It has been reported that an exploit for this issue exists in the wild.

Recommendations Update Google Chrome to version 146.0.7680.75 or later.