cve 2026 3918

CVE-2026-3918 is a high-severity use-after-free vulnerability in the WebMCP component of Chromium, affecting both Google Chrome and Microsoft Edge. Discovered by researcher Syn4pse and awarded a $10,000 bounty, the flaw was patched in Chrome's March 2026 stable update. Because Edge shares Chromium's codebase, Microsoft advises treating the browser update as part of standard exposure reduction. Users and administrators should apply the latest browser patches immediately to mitigate the risk of exploitation. This tag covers discussion of the vulnerability, its impact on Windows browsers, and patching guidance for enterprise IT environments.