Home / Vulnerability Intelligence / CVE-2026-3913

CVE-2026-3913 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: March 13, 2026

Google Chrome - Buffer Overflow

Published: March 11, 2026Updated: March 13, 2026Remote Exploitable

Overview

Google Chrome < 146.0.7680.71 contains a heap buffer overflow caused by improper handling in WebML, letting remote attackers exploit heap corruption via crafted HTML pages.

Severity & Score

Severity: High

CVSS Score: 8.8

EPSS Score: 7.3%(Probability of exploitation in next 30 days)

Impact

Remote attackers can exploit heap corruption to execute arbitrary code or crash the browser.

Mitigation

Update to version 146.0.7680.71 or later.

References

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 13, 2026

🟠 CVE-2026-3913 - High (8.8) Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-3913/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

Details

CVE ID: CVE-2026-3913
Severity: High
CVSS Score: 8.8
Type: buffer_overflow
Status: confirmed
EPSS: 7.3%
Social Posts: 1

CWE

CWE-122
CWE-787

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

7.3%Probability of exploitation in the next 30 days