CVE-2026-72984

Summary

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Affected Software

VendorProductVersion RangeStatus
MicrosoftMicrosoft Edge (Chromium-based)1.0.0.0 < 152.0.4191.53affected
MicrosoftMicrosoft Edge for Android1.0.0.0 < 152.0.4191.52affected
MicrosoftMicrosoft Edge for iOS1.0.0.0 < 152.0.4191.52affected
MicrosoftMicrosoft Edge for Linux1.0.0 < 152.0.4191.52affected
MicrosoftMicrosoft Edge for MAC1.0.0.0 < 152.0.4191.52affected
MicrosoftMicrosoft Edge for Windows1.0.0.0 < 152.0.4191.52affected

Weaknesses

  • CWE-843: CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References