Two Zero-Day Flaws Found in Google Chrome Components Skia and V8 JavaScript Engine
An urgent warning has been issued for millions of Google Chrome users worldwide. Google has released an emergency security update after discovering two dangerous vulnerabilities in its browser.
Google has announced an urgent security warning for the 3.5 billion users of the Chrome browser. Hackers are attacking users with two new zero-day flaws, and users need to update their browsers immediately.
Google has a schedule for security patches, but the fact that it has sent a second update in just 48 hours speaks volumes about the threat level. According to Google, the hackers have already started attacking users by exploiting two zero-day flaws.
According to Google, these vulnerabilities are named CVE-2026-3909 and CVE-2026-3910. Both vulnerabilities affect critical system components of Chrome. The first vulnerability relates to Chrome's graphics library, Skia. It's an out-of-bounds memory issue that could be exploited by attackers to remotely execute code on a system. This attack could also be triggered by visiting a malicious website.
Want to get your story featured as above? click here!
Want to get your story featured as above? click here!
The second flaw is related to the JavaScript engine used by the Chrome browser, called V8. Hackers have used this flaw to run malicious code on the computer by using a special HTML page.
When software, hardware, or a network is developed, loopholes often remain. Sometimes, even after testing the software at multiple levels, developers are unable to detect them. Cyber attackers exploit these loopholes to launch attacks. If a loophole is detected in time, developers can then prepare an update (patch). But if the patch isn't ready and a cyber attack occurs during this time, the company is unable to defend itself. This situation is called a "zero-day." Dealing with zero-day vulnerabilities is a major challenge for major tech companies, from Google to Microsoft.
Although Google has released updates to fix these vulnerabilities, they will be rolling out to all users gradually. Therefore, users should check for updates in the About Google Chrome section of their browser by going to the Help section.
According to cyber experts, zero-day vulnerabilities are extremely serious, so updating the browser immediately is considered the safest option.