A remote code execution vulnerability (CVE-2026-3909, CVSS 8.8 HIGH) in Microsoft Edge allows an attacker to bypass security restrictions and manipulate data on a targeted system. Based on authoritative NVD data, Google Chrome versions prior to 146.0.7680.75 are affected. The fix is to update to version 146.0.7680.75 or later.
A vulnerability was identified in Microsoft Edge. A remote attacker could exploit this vulnerability to trigger remote code execution, security restriction bypass and data manipulation on the targeted system. Note: CVE-2026-3909 is being exploited in the wild. A... Impact Remote Code Execution Security Restriction Bypass Data Manipulation System / Technologies affected Microsoft Edge version prior to 146.0.3856.62 Solutions Before installation of the software, please visit the software vendor web-site for more details. Apply fixes issued by the vendor: Update to version 146.0.3856.62 or later