Latest Chrome zero-day news

An unauthenticated file upload in the WordPress Pix for WooCommerce plugin scored CVSS 9.8, and OneUptime collected its fourth critical vulnerability in two weeks. The March 14 digest covers 10 high-severity flaws including two Chrome zero-days.

Two actively exploited Chrome zero-days in the Skia graphics engine and V8 JavaScript engine prompted an emergency Google patch within 48 hours. These are the second and third Chrome zero-days of 2026. Update to 146.0.7680.75 now.