CVE-2026-3909· google / skia· CWE-787
Google Skia Out-of-Bounds Write Vulnerability
Exploited in the wild. Listed by CISA on 2026-03-13; known to be used by ransomware.
2.3%likelihood of exploitation, next 30 days
84%of all CVEs are less likely
Nonecheck to confirm it
Google Skia contains an out-of-bounds write vulnerability that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.
No ready check is stored for this CVE. Confirm it by hand from the references.
References
Use this check only on systems you are authorised to test. Where the data comes from