Microsoft Edge security advisory (AV26-822)

unknownCVE-2026-72970

Serial Number: AV26-822 Date: August 17, 2026 As of August 14, 2026, Microsoft is affected by a vulnerability in the following product: Microsoft Edge (Chromium-based) Prior to 151.0.4129.86 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Microsoft Edge Stable Channel Release Notes Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CVE-2026-72970 (en anglais seulement)

CSIRTS triage

vendor: Microsoft product: Edge Remote code executionaffected: prior to 151.0.4129.86

What: A remote code execution vulnerability exists in Microsoft Edge Chromium-based browser.
Who is affected: Users running Microsoft Edge versions before 151.0.4129.86.
Urgency: High; remote code execution is a critical attack vector and updates are available.
Action: Update Microsoft Edge to version 151.0.4129.86 or later.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Edge

Get an email when a new Edge advisory drops — max one per day, one-click unsubscribe.

Details

Source: Canadian Centre for Cyber Security (CA · national-cert · site)
Severity: unknown
Published: 2026-08-17
Exploitation: Not in CISA KEV at last sync

Original advisory: https://cyber.gc.ca/en/alerts-advisories/microsoft-edge-security-advisory-av26-822

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-729700.53% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 43% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-72970	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

high[NEW] [high] Microsoft Edge: Vulnerability enables code executioncert-bund
unknownMicrosoft Edge Multiple Vulnerabilitieshkcert
unknownMultiple vulnerabilities in Microsoft Edge (August 17, 2026)cert-fr-avis
highCVE-2026-72970: Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker …nvd
highCVE-2026-72970: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerabilitymsrc