CVE-2026-3910—Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

漏洞名称

Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

描述

Google Chromium V8 contains an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

其他说明

• https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_12.html
• https://nvd.nist.gov/vuln/detail/CVE-2026-3910

相关新闻文章

• Google warns of new Chrome zero-day bug exploited in attacksSeptember 9, 2026
• Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside SandboxSeptember 9, 2026
• Google warns of new Chrome zero-day flaw exploited in attacksSeptember 4, 2026
• Google patches actively exploited Chrome zero-day (CVE-2026-85046)September 4, 2026
• Google Releases Chrome Update to Patch Actively Exploited V8 Zero-DaySeptember 4, 2026

相关 CWE

• CWE-119