Two Zero-Day Flaws Found in Google Chrome Components Skia and V8 JavaScript Engine

An urgent warning has been issued for millions of Google Chrome users worldwide. Google has released an emergency security update after discovering two dangerous vulnerabilities in its browser.

Sun, 15 Mar 2026 05:20 PM (IST)
Two Zero-Day Flaws Found in Google Chrome Components Skia and V8 JavaScript Engine
Two Zero-Day Flaws Found in Google Chrome Components Skia and V8 JavaScript Engine

Google has announced an urgent security warning for the 3.5 billion users of the Chrome browser. Hackers are attacking users with two new zero-day flaws, and users need to update their browsers immediately.

Google has a schedule for security patches, but the fact that it has sent a second update in just 48 hours speaks volumes about the threat level. According to Google, the hackers have already started attacking users by exploiting two zero-day flaws.

According to Google, these vulnerabilities are named CVE-2026-3909 and CVE-2026-3910. Both vulnerabilities affect critical system components of Chrome. The first vulnerability relates to Chrome's graphics library, Skia. It's an out-of-bounds memory issue that could be exploited by attackers to remotely execute code on a system. This attack could also be triggered by visiting a malicious website.

Advertisement

Want to get your story featured as above? click here!

Advertisement

Want to get your story featured as above? click here!

The second flaw is related to the JavaScript engine used by the Chrome browser, called V8. Hackers have used this flaw to run malicious code on the computer by using a special HTML page.

When software, hardware, or a network is developed, loopholes often remain. Sometimes, even after testing the software at multiple levels, developers are unable to detect them. Cyber ​​attackers exploit these loopholes to launch attacks. If a loophole is detected in time, developers can then prepare an update (patch). But if the patch isn't ready and a cyber attack occurs during this time, the company is unable to defend itself. This situation is called a "zero-day." Dealing with zero-day vulnerabilities is a major challenge for major tech companies, from Google to Microsoft.

Although Google has released updates to fix these vulnerabilities, they will be rolling out to all users gradually. Therefore, users should check for updates in the About Google Chrome section of their browser by going to the Help section.

According to cyber experts, zero-day vulnerabilities are extremely serious, so updating the browser immediately is considered the safest option.

Muskan Kumawat Muskan Kumawat is a Journalist & Content Writer at Sangri Times English, covering a wide range of topics, including news, entertainment, and trending stories. With a strong passion for storytelling and in-depth reporting, she delivers engaging and informative content to readers.