LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →

CVE-2026-3914 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: March 13, 2026

Google Chrome - Integer Overflow

Published: March 11, 2026Updated: March 13, 2026Remote Exploitable

Overview

Google Chrome < 146.0.7680.71 contains an integer overflow in WebML, caused by improper handling of integer values, letting remote attackers potentially exploit heap corruption via crafted HTML pages.

Severity & Score

Severity: High
CVSS Score: 8.8
EPSS Score: 6.2%(Probability of exploitation in next 30 days)

Impact

Remote attackers can exploit heap corruption, potentially leading to code execution or browser crash.

Mitigation

Update to version 146.0.7680.71 or later.

Social Media Activity(2 posts)

TheHackerWire
TheHackerWire
@thehackerwire
Mar 13, 2026

🟠 CVE-2026-3914 - High (8.8) Integer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-3914/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post
TheHackerWire
TheHackerWire
@thehackerwire
Mar 13, 2026

🟠 CVE-2026-3914 - High (8.8) Integer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-3914/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Details

CVE ID
CVE-2026-3914
Severity
High
CVSS Score
8.8
Type
integer_overflow
Status
confirmed
EPSS
6.2%
Social Posts
2

CWE

  • CWE-472
  • CWE-190

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

6.2%Probability of exploitation in the next 30 days