CVE Catalog

CVE-2026-72970

HighCVSS 8.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.51%

41th percentile - higher than 41% of all known CVEs

Summary

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Risk Assessment

Risk of remote code execution in the browser, potentially leading to system compromise.

Recommendation

It is recommended to immediately update Microsoft Edge to the latest version containing the security fix.

Original NVD description (English source)

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS