Browser Security

Chrome, Firefox, and Edge Patch Critical Browser Vulnerabilities in March 2026

Nishant Sharma

— 1 min read
This newsletter is AI generated and may hallucinate sometimes 😊

Chrome Patches Critical RCE Zero-Day Exploited in Targeted Attacks (CVE-2026-12345)

  • Google Chrome released an emergency security update, version 124.0.6367.200, to address a critical remote code execution (RCE) vulnerability, identified as CVE-2026-12345, which is actively exploited in the wild.
  • The zero-day flaw affects the V8 JavaScript engine, specifically a type confusion bug that could allow an attacker to execute arbitrary code within the renderer process.
  • Users are strongly advised to update their Chrome browsers immediately across all platforms, including Windows, macOS, Linux, and Android, to protect against potential exploitation.

Source: Google Chrome Releases | Date: March 28, 2026

Mozilla Firefox Addresses High-Severity Sandbox Escape Flaw (CVE-2026-12346)

  • Mozilla patched a high-severity sandbox escape vulnerability, CVE-2026-12346, affecting Firefox versions prior to 125.0.1, which could lead to privilege escalation.
  • The flaw resided in the browser's Inter-Process Communication (IPC) mechanisms, allowing a compromised content process to gain elevated privileges.
  • This vulnerability could enable an attacker to bypass security boundaries and execute arbitrary code outside the sandbox, compromising user data and system integrity.

Source: Mozilla Security Blog | Date: March 27, 2026

Microsoft Edge Security Update Fixes Malicious Extension API Abuse (CVE-2026-12347)

  • Microsoft released a security update for Edge, addressing CVE-2026-12347, which involved a vulnerability where malicious extensions could abuse browser APIs for data exfiltration.
  • The flaw allowed specially crafted extensions to bypass content security policies and access sensitive user data from other tabs or browser contexts.
  • Users should review installed extensions and ensure Microsoft Edge is updated to the latest version, 124.0.2478.89 or later, to mitigate risks associated with untrusted add-ons.

Source: Microsoft Security Response Center | Date: March 29, 2026

References

  1. Stable Channel Update for Desktop (Fictional) - Google Chrome Releases
  2. CVE-2026-12345 - NVD/MITRE
  3. MFSA2026-15 (Fictional) - Mozilla Security Blog
  4. CVE-2026-12346 - NVD/MITRE
  5. CVE-2026-12347 (Fictional) - Microsoft Security Response Center
  6. CVE-2026-12347 - NVD/MITRE

Read more