Buffer overflow in Google Chrome

CVE-2026-3931

Heap buffer overflow in Skia in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)

Vulnerability class: Buffer Overflow

EPSS: 0.001 (27.2th percentile) — read the EPSS interpretation.