CVE-2026-3919 - Vulnerability Analysis

Overview

Google Chrome < 146.0.7680.71 contains a use after free vulnerability in Extensions, caused by heap corruption via crafted HTML page, letting attackers exploit memory corruption after convincing users to install malicious extensions.

Severity & Score

Impact

Attackers can exploit heap corruption to execute arbitrary code or crash the browser, potentially compromising user security.

Mitigation

Update to version 146.0.7680.71 or later.

References

• https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_10.html
• https://issues.chromium.org/issues/444176961

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 12, 2026

🟠 CVE-2026-3919 - High (8.8) Use after free in Extensions in Google Chrome prior to 146.0.7680.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-3919/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner