In the new Chrome versions 146.0.7680.75/76 for Windows and macOS, and 146.76.75 for Linux, developers have fixed two high-risk security vulnerabilities. The vulnerabilities were discovered on February 10th and are already being exploited for attacks in the wild. The first zero-day vulnerability is a bug in the Skia graphics library that allows write access to memory addresses outside the boundaries of a predefined buffer. The second vulnerability is found in the V8 JavaScript engine, an "inappropriate implementation" that remains unclear. The new version of Chrome 146 also fixed 29 security vulnerabilities, almost all of which were reported by external security researchers.