CVE-2026-3910

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

March 14, 2026

Last Seen

September 9, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

BlueMoon Exploit Kit Targeting Chrome and Windows by Multiple State Actors80.8

A new exploit kit named BlueMoon has been rapidly adopted by at least four espionage groups, primarily linked to China, exploiting vulnerabilities in Google Chrome and Microsoft Windows. The first observed use of BlueMoon was on August 28, 2026, by the China-aligned threat actor TA412, with subseque...

Critical Chrome Zero-Day CVE-2026-85046 Exploited in the Wild80.8

Google has released an emergency update for Chrome to address CVE-2026-85046, a high-severity zero-day vulnerability in the V8 JavaScript and WebAssembly engine, rated 8.8 on the CVSS scale. The flaw, identified as a type confusion issue, allows remote attackers to execute arbitrary code within Chro...

Microsoft Edge Vulnerabilities Enable Remote Code Execution75.0

Multiple vulnerabilities have been identified in Microsoft Edge, with CVE-2026-3910 and CVE-2026-3909 both being exploited in the wild. These vulnerabilities allow remote attackers to execute arbitrary code, bypass security restrictions, and manipulate data via crafted HTML pages. The risk level for...

Microsoft September 2026 Patch Tuesday: Record 974 Vulnerabilities Addressed72.9

On September 8, 2026, Microsoft released a record-breaking 974 patches for vulnerabilities across its products, including two actively exploited zero-day vulnerabilities: CVE-2026-81963 and CVE-2026-85880. These vulnerabilities allow local attackers to escalate privileges to SYSTEM level, posing sig...