Google was first to announce the threat, issuing an update for Chrome browser users and acknowledging that the security flaw was already being actively exploited.
Microsoft released a fix for its Edge browser, which it confirmed was affected by the same vulnerability.