Tech giant Google has issued an emergency alert for nearly 3.5 billion Google Chrome users worldwide, warning that the browser is currently under attack. Hackers are actively exploiting two severe zero-day vulnerabilities.
The vulnerabilities, identified as CVE–2026–3909 and CVE–2026–3910, allow attackers to compromise core Chrome functions. Experts describe the flaws as extremely serious and capable of enabling cyber intrusions. Google released an urgent, unscheduled security update to address the threats.
This emergency update follows two previous patches released earlier in March, which fixed 29 security issues. However, the current vulnerabilities are being actively exploited, making immediate updates essential. Security specialists warn that a zero-day flaw is particularly dangerous because attackers exploit it before the company is aware of its existence.
Google has limited the release of technical details to prevent further exploitation. Only users who update their browsers promptly are protected against ongoing attacks. The vulnerabilities affect core components of Chrome and could allow hackers to execute highly damaging cyberattacks.
In a rare development, the flaws were discovered internally by Google’s own Project Zero cybersecurity team. Established in 2014, Project Zero focuses on identifying critical weaknesses in software and hardware. The team explained, “We research mobile operating systems, web browsers, and open-source libraries. Our findings help patch serious vulnerabilities and strengthen long-term security.”
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has strongly advised organizations and individual users to install the update immediately. Experts emphasized that delaying updates puts millions of users at risk, given that Chrome is the most widely used browser globally.
With attacks already underway, Google Chrome is very much under attack, and users are urged to update their browsers without delay to protect their systems from potential compromise. The situation highlights the ongoing risks of cyber threats and the importance of timely security updates.
In other news read more about: Google Chromecast Users Face ‘Untrusted Device’ Error
