LeakyCreds
NewInstant webhook alerts now available ā€” notified within seconds of any credential detection.Learn more ā†’
Home / Vulnerability Intelligence / CVE-2026-3915

CVE-2026-3915 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: March 13, 2026

Google Chrome - Out of Bounds Read

Published: March 11, 2026Updated: March 13, 2026Remote Exploitable

Overview

Google Chrome < 146.0.7680.71 contains a heap buffer overflow caused by improper bounds checking in WebML, letting remote attackers perform out of bounds memory read via crafted HTML page.

Severity & Score

Severity: High
CVSS Score: 8.8
EPSS Score: 5.7%(Probability of exploitation in next 30 days)

Impact

Remote attackers can read out of bounds memory, potentially leaking sensitive information.

Mitigation

Update to version 146.0.7680.71 or later.

References

Social Media Activity(2 posts)

TheHackerWire
TheHackerWire
@thehackerwire
Mar 13, 2026

šŸŸ  CVE-2026-3915 - High (8.8) Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-3915/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post
TheHackerWire
TheHackerWire
@thehackerwire
Mar 13, 2026

šŸŸ  CVE-2026-3915 - High (8.8) Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-3915/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

Details

CVE ID
CVE-2026-3915
Severity
High
CVSS Score
8.8
Type
out_of_bounds_rw
Status
confirmed
EPSS
5.7%
Social Posts
2

CWE

  • CWE-122

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

5.7%Probability of exploitation in the next 30 days