RaqibCTI
CVE

CVE-2026-3909

P2
Google Skia Out-of-Bounds Write Vulnerability
Google · Skia
Date added (CISA)
2026-03-13
Remediation due
2026-03-27
Known ransomware use
Not indicated
Remediation priority
P2past CISA due date

Description

Google Skia contains an out-of-bounds write vulnerability that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.

Source: NVD ↗ · CISA KEV Catalog ↗