cve 2026 3929

CVE-2026-3929 is a medium-severity side-channel information leak vulnerability in the ResourceTiming API, affecting Chromium-based browsers including Microsoft Edge. The flaw allows an attacker to infer sensitive information through timing measurements, but does not enable remote code execution or direct system compromise. Google addressed the issue in a March 2026 Chromium security update, and Microsoft Edge inherited the fix through its upstream Chromium ingestion process. Edge users are protected once Microsoft applies the corrected code path. This tag covers discussions about the vulnerability's impact, the fix mechanism, and the relationship between Chromium and Edge security updates.