{"id":223366,"date":"2026-03-13T18:14:00","date_gmt":"2026-03-13T22:14:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/03\/13\/u-s-cisa-adds-google-chrome-flaws-to-its-known-exploited-vulnerabilities-catalog\/"},"modified":"2026-03-13T19:40:12","modified_gmt":"2026-03-13T23:40:12","slug":"u-s-cisa-adds-google-chrome-flaws-to-its-known-exploited-vulnerabilities-catalog","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/03\/13\/u-s-cisa-adds-google-chrome-flaws-to-its-known-exploited-vulnerabilities-catalog\/","title":{"rendered":"U.S. CISA adds Google Chrome flaws to its Known Exploited Vulnerabilities catalog"},"content":{"rendered":"<p><a href=\"https:\/\/securityaffairs.com\/189411\/security\/u-s-cisa-adds-google-chrome-flaws-to-its-known-exploited-vulnerabilities-catalog.html\">U.S. CISA adds Google Chrome flaws to its Known Exploited Vulnerabilities catalog<\/a><\/p>\n<p><a href=\"https:\/\/securityaffairs.com\/189411\/security\/u-s-cisa-adds-google-chrome-flaws-to-its-known-exploited-vulnerabilities-catalog.html\">https:\/\/securityaffairs.com\/189411\/security\/u-s-cisa-adds-google-chrome-flaws-to-its-known-exploited-vulnerabilities-catalog.html<\/a><\/p>\n<p>Publish Date: <a href=\"publish_date]\">2026-03-13 18:14:00<\/a><\/p>\n<p>Source Domain: <a href=\"securityaffairs.com\">securityaffairs.com<\/a><\/p>\n<p><h2>U.S. CISA adds Google Chrome flaws to its Known Exploited Vulnerabilities catalog<\/h2>\n<\/p>\n<p>\t\t\t\t\t\t\t<span> Pierluigi Paganini<\/span><br \/>\n\t\t\t\t\t\t\t<span><img decoding=\"async\" src=\"https:\/\/securityaffairs.com\/wp-content\/themes\/security_affairs\/images\/clock-icon.svg\" alt=\"\"\/> March 13, 2026<\/span><\/p>\n<p>\t\t\t\t\t\t<img decoding=\"async\" class=\"img-fluid mb-4\" src=\"https:\/\/i0.wp.com\/securityaffairs.com\/wp-content\/uploads\/2020\/07\/CISA.jpeg?fit=700%2C368&#038;ssl=1\" alt=\"\"\/><\/p>\n<h2 class=\"wp-block-heading\">U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Google Chrome flaws to its Known Exploited Vulnerabilities catalog.<\/h2>\n<p>The U.S. Cybersecurity and Infrastructure Security Agency (CISA)\u00a0added two Google Chrome flaws to its Known Exploited Vulnerabilities (KEV) catalog.<\/p>\n<p>Below are the flaws added to the catalog:<\/p>\n<p>This week, Google released security updates to address two high-severity vulnerabilities, tracked as\u00a0<strong>CVE-2026-3909<\/strong>\u00a0and\u00a0<strong>CVE-2026-3910<\/strong>, in the\u00a0Chrome\u00a0browser. The company is aware of attacks in the wild exploiting both flaws.<\/p>\n<p>\u201cGoogle is aware that exploits for both CVE-2026-3909 &#038; CVE-2026-3910 exist in the wild.\u201d reads the\u00a0advisory\u00a0published by the tech giant.<\/p>\n<p>Google experts discovered both vulnerabilities on March 10, 2026. As usual, the company did not disclose details about the attacks exploiting these flaws or the threat actors involved.<\/p>\n<p>Below are the descriptions for these vulnerabilities:<\/p>\n<ul class=\"wp-block-list\">\n<li>CVE-2026-3909 (CVSS score: 8.8) \u2013 Out-of-bounds write in the Skia 2D graphics library that lets a remote attacker trigger memory corruption by tricking a user into opening a specially crafted HTML page.<\/li>\n<li>CVE-2026-3910 (CVSS score: 8.8) \u2013 Flaw in the implementation of the V8 JavaScript\/WebAssembly engine that lets a remote attacker run arbitrary code within the browser sandbox using a maliciously crafted HTML page.<\/li>\n<\/ul>\n<p>The company informed users that the Stable channel has been updated to version 146.0.7680.75\/76 for Windows and Mac, and 146.0.7680.75 for Linux. The update will roll out over the coming days and weeks. A full list of changes in this build is available in the\u00a0log.<\/p>\n<p>According to\u00a0Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities, FCEB agencies have to&#8230;<\/p>\n<p><a href=\"https:\/\/securityaffairs.com\/189411\/security\/u-s-cisa-adds-google-chrome-flaws-to-its-known-exploited-vulnerabilities-catalog.html\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>U.S. CISA adds Google Chrome flaws to its Known Exploited Vulnerabilities catalog https:\/\/securityaffairs.com\/189411\/security\/u-s-cisa-adds-google-chrome-flaws-to-its-known-exploited-vulnerabilities-catalog.html Publish Date:&#8230;<\/p>\n","protected":false},"author":1,"featured_media":223367,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/securityaffairs.com\/wp-content\/uploads\/2020\/07\/CISA.jpeg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[24],"class_list":["post-223366","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-cybersecurity"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/223366"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=223366"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/223366\/revisions"}],"predecessor-version":[{"id":223368,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/223366\/revisions\/223368"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/223367"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=223366"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=223366"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=223366"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}