Microsoft Edge Vulnerabilities Enable Remote Code Execution

Hkcert

Microsoft Edge Vulnerabilities Enable Remote Code Execution

First seen 17 Mar 2026, 04:36 UTC • •75.0

Article Content

1 / 3

Browse articles

ThreatCluster •March 18, 2026 at 04:26 UTC

•CVE-2026-3910 and CVE-2026-3909 are actively exploited vulnerabilities in Microsoft Edge.
•Both vulnerabilities allow remote code execution and are rated as Extremely High Risk.
•Users are advised to apply vendor-issued fixes immediately to protect their systems.

Multiple vulnerabilities have been identified in Microsoft Edge, with CVE-2026-3910 and CVE-2026-3909 both being exploited in the wild. These vulnerabilities allow remote attackers to execute arbitrary code, bypass security restrictions, and manipulate data via crafted HTML pages. The risk level for both vulnerabilities is rated as Extremely High Risk. Users of Microsoft Edge are urged to apply the fixes issued by the vendor immediately. The vulnerabilities were published on 2026-03-12 and added to the CISA KEV list for active exploitation on 2026-03-13. Attackers can leverage these flaws to significantly compromise affected systems. Security professionals should prioritize patching to mitigate the risks associated with these vulnerabilities.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 212d ago How this analysis works

Timeline

2026-03-12

CVE-2026-3910 and CVE-2026-3909 published

2026-03-13

CVE-2026-3910 and CVE-2026-3909 added to CISA KEV for active exploitation

2026-03-16

First article published detailing vulnerabilities

2026-03-17

Second article published with additional details

More articles in this cluster (2)

Threat Graph

7 entities, 6 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (4)

Data Breach
DDoS
Zero-day Exploit
T1203 - Exploitation for Client Execution

Vulnerability (2)

CVE-2026-3909
CVE-2026-3910

Affected Platform (1)

Microsoft Edge

Relationships

CVE-2026-3909 targets Microsoft Edge
CVE-2026-3910 targets Microsoft Edge
Data Breach targets Microsoft Edge
DDoS targets Microsoft Edge
Zero-day Exploit targets Microsoft Edge
T1203 - Exploitation for Client Execution targets Microsoft Edge

Following this threat?

Track CVE-2026-3909 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…

CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…