CVE-2026-3539 (GCVE-0-2026-3539)
Vulnerability from cvelistv5 – Published: 2026-03-04 19:24 – Updated: 2026-06-16 21:40
VLAI
EPSS
VEX
Determined a bug and not a vulnerability
Show details on NVD website{
"containers": {
"cna": {
"providerMetadata": {
"dateUpdated": "2026-06-16T21:40:58.444Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"rejectedReasons": [
{
"lang": "en",
"value": "Determined a bug and not a vulnerability"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2026-3539",
"datePublished": "2026-03-04T19:24:28.417Z",
"dateRejected": "2026-06-16T21:40:58.444Z",
"dateReserved": "2026-03-04T18:18:28.201Z",
"dateUpdated": "2026-06-16T21:40:58.444Z",
"state": "REJECTED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-3539",
"date": "2026-06-16",
"epss": "0.00271",
"percentile": "0.18497"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-3539\",\"sourceIdentifier\":\"chrome-cve-admin@google.com\",\"published\":\"2026-03-04T20:16:20.957\",\"lastModified\":\"2026-06-17T13:20:22.227\",\"vulnStatus\":\"Rejected\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Rejected reason: Determined a bug and not a vulnerability\"}],\"metrics\":{},\"references\":[]}}",
"redhat_vex": {
"current_release_date": "2026-06-28T11:39:28+00:00",
"cve": "CVE-2026-3539",
"id": "CVE-2026-3539",
"initial_release_date": "2026-03-03T00:00:00+00:00",
"product_status:known_not_affected": "1",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "chromium-browser: Object lifecycle issue in DevTools",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3539.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "critical",
"current_release_date": "2026-06-18T02:01:34Z",
"cve": "CVE-2026-3539",
"id": "CVE-2026-3539",
"initial_release_date": "2026-03-05T13:57:02Z",
"product_status:recommended": "10",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-3539",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-3539.json",
"version": "6"
},
"vulnrichment": {
"containers": "{\"cna\": {\"providerMetadata\": {\"orgId\": \"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28\", \"shortName\": \"Chrome\", \"dateUpdated\": \"2026-06-16T21:40:58.444Z\"}, \"rejectedReasons\": [{\"lang\": \"en\", \"value\": \"Determined a bug and not a vulnerability\"}]}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-3539\", \"assignerOrgId\": \"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28\", \"state\": \"REJECTED\", \"assignerShortName\": \"Chrome\", \"dateReserved\": \"2026-03-04T18:18:28.201Z\", \"datePublished\": \"2026-03-04T19:24:28.417Z\", \"dateUpdated\": \"2026-06-16T21:40:58.444Z\", \"dateRejected\": \"2026-06-16T21:40:58.444Z\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…