Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
Exploited in the wild. CISA added it to its Known Exploited Vulnerabilities list on 13 Mar 2026.
2.7%
Reading the vendor advisory
Fix it in your code
Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2026-3910. Nothing runs until you send it.
Google Chromium V8 contains an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
You are affected if
The fix