Back Hkcert

Microsoft Edge Remote Code Execution Vulnerability

Hkcert • March 17, 2026

A vulnerability was identified in Microsoft Edge. A remote attacker could exploit this vulnerability to trigger remote code execution, security restriction bypass and data manipulation on the targeted system.

CVE-2026-3909 is being exploited in the wild. A remote attacker could use this flaw to perform out of bounds memory access via a crafted HTML page.

Hence, the risk level is rated as Extremely High Risk.

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Edge Vulnerabilities Enable Remote Code Execution Multiple vulnerabilities have been identified in Microsoft Edge, with CVE-2026-3910 and CVE-2026-3909 both being exploited in the wild. These vulnerabilities allow remote attackers to execute arbitrary code, bypass security restrictions, and manipulate data via crafted HTML pages. The risk level for both vulnerabilities is rated as Extremely High Risk. Users of Microsoft Edge are urged to apply the fixes issued by the vendor immediately. The vulnerabilities were published on 2026-03-12 and added to the CISA KEV list for active exploitation on 2026-03-13. Attackers can leverage these flaws to significantly compromise affected systems. Security professionals should prioritize patching to mitigate the risks associated with these vulnerabilities. 2 sources 75

Extracted Entities

Microsoft Edge Remote Code Execution Vulnerability

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

MITRE ATT&CK (1)

Platforms (1)