Browser engines are the most widely deployed attack surface in the world — and in 2026, they remain stubbornly difficult to harden. Google's emergency update for Chrome 146 patched two zero-days with confirmed in-the-wild exploitation: CVE-2026-3909, an out-of-bounds write in the Skia graphics l...
Source: [Dev.to](https://dev.to/alejandxr/chrome-146-zero-days-the-skia-and-v8-attack-surface-2026-edition-494a)