Multiple vulnerabilities in Google Chrome, including CVE-2026-3909 which is being actively exploited, allow a remote attacker to bypass security restrictions and manipulate data. Affected versions are prior to 146.0.76380.115 for Android, prior to 146.0.7680.75 for Linux, and prior to 146.0.7680.75/76 for macOS and Windows. The solution is to apply the vendor fixes by updating to the specified patched versions for each platform.
Multiple vulnerabilities were identified in Google Chrome. A remote attacker could exploit some of these vulnerabilities to trigger security restriction bypass and data manipulation on the targeted system. Note: CVE-2026-3909 is being exploited in the wild. An attacker could use this... Impact Data Manipulation Security Restriction Bypass System / Technologies affected Google Chrome prior to 146.0.76380.115 (Android) Google Chrome prior to 146.0.7680.75 (Linux) Google Chrome prior to 146.0.7680.75/76 (Mac) Google Chrome prior to 146.0.7680.75/76 (Windows) Solutions Before installation of the software, please visit the software vendor web-site for more details. Apply fixes issued by the vendor: Update to version 146.0.76380.115 (Android) or later Update to version 146.0.7680.75 (Linux) or later Update to version 146.0.7680.75/76 (Mac) or later Update to version 146.0.7680.75/76 (Windows) or later