CVE-2026-3931 - Vulnerability Analysis

Overview

Google Chrome < 146.0.7680.71 contains a heap buffer overflow caused by improper bounds checking in Skia, letting remote attackers perform out-of-bounds memory access via crafted HTML pages, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can perform out-of-bounds memory access, potentially leading to memory corruption or denial of service.

Mitigation

Update to version 146.0.7680.71 or later.

References

• https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_10.html
• https://issues.chromium.org/issues/417599694

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 12, 2026

🟠 CVE-2026-3931 - High (8.8) Heap buffer overflow in Skia in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-3931/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner