CISA's list that day
13 March 2026
On CISA added 2 vulnerabilities to its list of exploited vulnerabilities, in Google Skia and Google Chromium V8. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2026-3909Out-of-Bounds Write | Google Skia | Patch soon | 0.02 | ||
| CVE-2026-3910Improper Restriction of Operations Within the Bounds of a Memory Buffer | Google Chromium V8 | Patch soon | 0.01 |