VDB
CVE-2026-72984
CVE-2026-72984
PUBLISHED
CVSS 8.8 HIGH
Reported by microsoft · Published August 28, 2026
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Risk Scores
CVSS 3.1
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Edge (Chromium-based) | 1.0.0.0 |
| Microsoft | Microsoft Edge for Android | 1.0.0.0 |
| Microsoft | Microsoft Edge for iOS | 1.0.0.0 |
| Microsoft | Microsoft Edge for Linux | 1.0.0 |
| Microsoft | Microsoft Edge for MAC | 1.0.0.0 |
| Microsoft | Microsoft Edge for Windows | 1.0.0.0 |
| Microsoft | Microsoft Edge for Linux | 1.0.0 |
| Microsoft | Microsoft Edge for iOS | 1.0.0.0 |
| Microsoft | Microsoft Edge for Android | 1.0.0.0 |
| microsoft | edge | 1.0.0, 1.0.0.0 |
| Microsoft | Microsoft Edge for MAC | 1.0.0.0 |
| microsoft | edge_chromium | 1.0.0.0 |
| Microsoft | Microsoft Edge (Chromium-based) | 1.0.0.0 |
| Microsoft | Microsoft Edge for Windows | 1.0.0.0 |
Timeline
- Aug 28, 2026 Coalition ESS Score
- Aug 28, 2026 CVE Published
- Aug 29, 2026 EPSS Score
- Aug 30, 2026 EPSS Score
- Sep 1, 2026 Security Advisory
- Sep 2, 2026 EPSS Score
- Sep 6, 2026 EPSS Score
- Sep 9, 2026 EPSS Score
- Sep 12, 2026 EPSS Score
- Sep 16, 2026 EPSS Score
- Sep 18, 2026 EPSS Score
- Sep 21, 2026 EPSS Score
References
- Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability vendor-advisorypatch