Google Patches Two Actively Exploited Chrome Zero-Days; Browser Runs on 3.8 Billion Devices

Google released emergency patches for CVE-2026-3909 and CVE-2026-3910, Chrome's second and third actively weaponized zero-days of 2026. Both high-severity vulnerabilities were exploited in the wild before patches were available. The patches affect an estimated 3.8 billion Chrome installations globally.