CVE detail
CVE-2026-3910 — Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
Published 2026-03-13 · Modified 2026-03-13 · Source kev
HIGH
severity
CVSS-derived band
0.0200
EPSS probability
exploitation probability, 30d
79.0%
EPSS percentile
percentile vs all CVEs
LISTED
CISA KEV
due 2026-03-27
⚠ Actively exploited in the wild — CISA KEV listed 2026-03-13, federal remediation due 2026-03-27.
Description
Google Chromium V8 contains an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References