> ## Content Index
> Fetch the complete content index at: https://intelligence.zerodayengineering.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# ⚡️ 0-Day Alert: Google Chrome RCE + EoP in the wild
- URL: https://intelligence.zerodayengineering.com/0-day-alert-cve-2026-3910/
- Published: 2026-03-26T09:09:17.000Z
- Updated: 2026-09-17T16:45:26.000Z
- Description: Update Chrome to 146.0.7680.80
- Author: Zero Day Engineering
- Tags: 0-Day Alerts

CVE-2026-3910: v8 Maglev JIT incorrect write barrier elimination for Smi representation in Phi edge cases => UaF or memory corruption 

Impact: remote ACE in renderer via JavaScript code. 

Same structural pattern invariant as seen in a recent WebKit jsc bug.

CVE-2026-3909: Skia glyph cache key collision to out-of-bounds write in GPU process

Impact: at least a partial (full on some platforms) Sandbox Escape primitive.

Potentially reachable remotely via renderer media formats.

In the specific exploit it was likely pushed directly to IPC from a compromised renderer via CVE-2026-3910.

Both bugs patched since Chrome 146.0.7680.80 for Windows/Mac and 146.0.7680.80 for Linux