CVE-2026-3909 and CVE-2026-3910 put 3.5 billion Chrome users at risk. This is a 2026 roundup of the Skia and V8 attack surface — what the vulnerabilities are, why browser engine bugs are hard to kill, and what defenses actually reduce exposure.

CVE-2026-3909 and CVE-2026-3910 put 3.5 billion Chrome users at risk. This is a 2026 roundup of the Skia and V8 attack surface — what the vulnerabilities are, why browser engine…

Mozilla fixes two critical Firefox flaws with public exploit code as Google, Adobe, and Broadcom patch Chrome, ColdFusion, and VMware security bugs.