Home / Vulnerability Intelligence / CVE-2026-3936

CVE-2026-3936 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: March 12, 2026

Google Chrome - Use After Free

Published: March 11, 2026Updated: March 12, 2026Remote Exploitable

Overview

Google Chrome on Android < 146.0.7680.71 contains a use after free vulnerability in WebView caused by improper memory handling, letting remote attackers exploit heap corruption via crafted HTML pages.

Severity & Score

Severity: High

CVSS Score: 8.8

EPSS Score: 6.2%(Probability of exploitation in next 30 days)

Impact

Remote attackers can exploit heap corruption, potentially leading to code execution or browser crash.

Mitigation

Update to version 146.0.7680.71 or later.

References

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 12, 2026

🟠 CVE-2026-3936 - High (8.8) Use after free in WebView in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-3936/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

Details

CVE ID: CVE-2026-3936
Severity: High
CVSS Score: 8.8
Type: use_after_free
Status: unconfirmed
EPSS: 6.2%
Social Posts: 1

CWE

CWE-416

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

6.2%Probability of exploitation in the next 30 days