Microsoft Edge Remote Code Execution Vulnerability

Release Date: 17 Mar 2026

RISK: Extremely High Risk

TYPE: Clients - Browsers

A vulnerability was identified in Microsoft Edge. A remote attacker could exploit this vulnerability to trigger remote code execution, security restriction bypass and data manipulation on the targeted system.

 

Note:

CVE-2026-3909 is being exploited in the wild. A remote attacker could use this flaw to perform out of bounds memory access via a crafted HTML page. 

 

Hence, the risk level is rated as Extremely High Risk.

---

Impact

• Remote Code Execution
• Security Restriction Bypass
• Data Manipulation

---

System / Technologies affected

• Microsoft Edge version prior to 146.0.3856.62

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to version 146.0.3856.62 or later

---

Vulnerability Identifier

• CVE-2026-3909

---

Source

• Microsoft Edge

---

Related Link

• https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#march-16-2026
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3909