A silent threat is circulating, and if you use Google Chrome, you need to act now. An emergency security patch has been released to combat a critical vulnerability – a “zero-day” – already being exploited by attackers.
Zero-days are the most dangerous kind of security flaw. They’re weaknesses discovered and actively used *before* developers even know they exist, leaving users completely exposed. This marks the second and third zero-days discovered in Chrome this year alone, highlighting an escalating risk.
The current patch, addressing CVE-2026-3910, targets a flaw within V8, Chrome’s core JavaScript and WebAssembly engine. Details surrounding the exploitation remain closely guarded, reported initially by Google’s own Threat Analysis Group on March 10th, but the urgency of the situation is clear.
A second vulnerability, CVE-2026-3909, involving a weakness in Chrome’s 2D graphics library (Skia), was initially slated for this update. This flaw could have allowed attackers to crash your browser or, even worse, remotely execute malicious code on your system. The fix is now anticipated in a forthcoming release.
Google released the critical update to the Stable Channel on March 12th, bringing Chrome to version 146.0.7680.75/76 for Windows and Mac, and 146.0.7680.75 for Linux. Don’t wait for it to arrive automatically; proactively check for updates now.
To verify your version, navigate to the Chrome menu (the three dots in the top-right corner) and select “About Google Chrome.” If an update is available, it will begin downloading immediately. A simple browser restart will finalize the process and secure your system.
Even if you regularly close and reopen Chrome, the update should apply automatically. However, confirming the update manually is the most reliable way to ensure your protection against this active threat. Don't underestimate the importance of this step.
