# Microsoft Edge 148.0.3967.83 Microsoft Edge 148.0.3967.83, released May 21, 2026, fixes 71 CVEs in Microsoft Edge. None of them is reported as exploited. Patch Radar priority: Urgent. The latest Microsoft Edge is 157.0.4341.42, which also fixes every one of these CVEs. - Web page: https://patchblox.com/security/fix/macos/com.microsoft.edgemac-148.0.3967.83 - Platform: macOS - Released: May 21, 2026 - Priority: Urgent (Closes CVE-2026-45495, exploitation more likely) - CVEs: 71, exploited: 0, on CISA KEV: 0 - Superseded by: [Microsoft Edge 157.0.4341.42](https://patchblox.com/security/data/product/macos/microsoft-edge.md), the latest version, which also fixes every CVE listed here ## Applies to | Product | Release | Fixed in | |---|---|---| | [Microsoft Edge](https://patchblox.com/security/data/product/macos/microsoft-edge.md) | | 148.0.3967.83 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-45495](https://patchblox.com/security/data/cve/CVE-2026-45495.md) | Urgent | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 9.8 | 0.0099 | More likely | | [CVE-2026-45494](https://patchblox.com/security/data/cve/CVE-2026-45494.md) | Urgent | Microsoft Edge (Chromium-based) Spoofing Vulnerability | 6.1 | 0.0030 | More likely | | [CVE-2026-45492](https://patchblox.com/security/data/cve/CVE-2026-45492.md) | Urgent | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | 5.4 | 0.0030 | More likely | | [CVE-2026-8511](https://patchblox.com/security/data/cve/CVE-2026-8511.md) | Urgent | Chromium: CVE-2026-8511 Use after free in UI | 9.6 | 0.0023 | | | [CVE-2026-8525](https://patchblox.com/security/data/cve/CVE-2026-8525.md) | Urgent | Chromium: CVE-2026-8525 Heap buffer overflow in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-8580](https://patchblox.com/security/data/cve/CVE-2026-8580.md) | Urgent | Chromium: CVE-2026-8580 Use after free in Mojo | 9.6 | 0.0021 | | | [CVE-2026-8579](https://patchblox.com/security/data/cve/CVE-2026-8579.md) | Urgent | Chromium: CVE-2026-8579 Insufficient validation of untrusted input in Skia | 9.6 | 0.0014 | | | [CVE-2026-9111](https://patchblox.com/security/data/cve/CVE-2026-9111.md) | High | Chromium: CVE-2026-9111 Use after free in WebRTC | 8.8 | 0.0080 | | | [CVE-2026-41107](https://patchblox.com/security/data/cve/CVE-2026-41107.md) | High | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | 7.4 | 0.0065 | | | [CVE-2026-9119](https://patchblox.com/security/data/cve/CVE-2026-9119.md) | High | Chromium: CVE-2026-9119 Heap buffer overflow in WebRTC | 8.8 | 0.0054 | | | [CVE-2026-9120](https://patchblox.com/security/data/cve/CVE-2026-9120.md) | High | Chromium: CVE-2026-9120 Use after free in WebRTC | 8.8 | 0.0050 | | | [CVE-2026-8517](https://patchblox.com/security/data/cve/CVE-2026-8517.md) | High | Chromium: CVE-2026-8517 Object lifecycle issue in WebShare | 8.8 | 0.0050 | | | [CVE-2026-8509](https://patchblox.com/security/data/cve/CVE-2026-8509.md) | High | Chromium: CVE-2026-8509 Heap buffer overflow in WebML | 8.8 | 0.0040 | | | [CVE-2026-9112](https://patchblox.com/security/data/cve/CVE-2026-9112.md) | High | Chromium: CVE-2026-9112 Use after free in GPU | 8.8 | 0.0040 | | | [CVE-2026-9118](https://patchblox.com/security/data/cve/CVE-2026-9118.md) | High | Chromium: CVE-2026-9118 Use after free in XR | 8.8 | 0.0040 | | | [CVE-2026-9126](https://patchblox.com/security/data/cve/CVE-2026-9126.md) | High | Chromium: CVE-2026-9124 Insufficient validation of untrusted input in Input | 8.8 | 0.0040 | | | [CVE-2026-8524](https://patchblox.com/security/data/cve/CVE-2026-8524.md) | High | Chromium: CVE-2026-8524 Out of bounds write in WebAudio | 8.8 | 0.0038 | | | [CVE-2026-8526](https://patchblox.com/security/data/cve/CVE-2026-8526.md) | High | Chromium: CVE-2026-8526 Out of bounds write in WebRTC | 8.8 | 0.0038 | | | [CVE-2026-9114](https://patchblox.com/security/data/cve/CVE-2026-9114.md) | High | Chromium: CVE-2026-9114 Use after free in QUIC | 8.8 | 0.0037 | | | [CVE-2026-9121](https://patchblox.com/security/data/cve/CVE-2026-9121.md) | High | Chromium: CVE-2026-9126 Use after free in DOM | 8.8 | 0.0033 | | | [CVE-2026-8558](https://patchblox.com/security/data/cve/CVE-2026-8558.md) | High | Chromium: CVE-2026-8558 Out of bounds write in Fonts | 8.8 | 0.0031 | | | [CVE-2026-8540](https://patchblox.com/security/data/cve/CVE-2026-8540.md) | High | Chromium: CVE-2026-8540 Type Confusion in V8 | 8.8 | 0.0031 | | | [CVE-2026-8529](https://patchblox.com/security/data/cve/CVE-2026-8529.md) | High | Chromium: CVE-2026-8529 Heap buffer overflow in Codecs | 8.8 | 0.0030 | | | [CVE-2026-8527](https://patchblox.com/security/data/cve/CVE-2026-8527.md) | High | Chromium: CVE-2026-8527 Insufficient validation of untrusted input in Downloads | 8.8 | 0.0029 | | | [CVE-2026-8518](https://patchblox.com/security/data/cve/CVE-2026-8518.md) | High | Chromium: CVE-2026-8518 Use after free in Blink | 8.8 | 0.0028 | | | [CVE-2026-8522](https://patchblox.com/security/data/cve/CVE-2026-8522.md) | High | Chromium: CVE-2026-8522 Use after free in Downloads | 8.8 | 0.0028 | | | [CVE-2026-8532](https://patchblox.com/security/data/cve/CVE-2026-8532.md) | High | Chromium: CVE-2026-8532 Integer overflow in XML | 8.8 | 0.0028 | | | [CVE-2026-8544](https://patchblox.com/security/data/cve/CVE-2026-8544.md) | High | Chromium: CVE-2026-8544 Use after free in Media | 8.8 | 0.0028 | | | [CVE-2026-8549](https://patchblox.com/security/data/cve/CVE-2026-8549.md) | High | Chromium: CVE-2026-8549 Use after free in Media | 8.8 | 0.0028 | | | [CVE-2026-8551](https://patchblox.com/security/data/cve/CVE-2026-8551.md) | High | Chromium: CVE-2026-8551 Use after free in Downloads | 8.8 | 0.0028 | | | [CVE-2026-8581](https://patchblox.com/security/data/cve/CVE-2026-8581.md) | High | Chromium: CVE-2026-8581 Use after free in GPU | 8.8 | 0.0026 | | | [CVE-2026-8512](https://patchblox.com/security/data/cve/CVE-2026-8512.md) | High | Chromium: CVE-2026-8512 Use after free in FileSystem | 8.3 | 0.0025 | | | [CVE-2026-8577](https://patchblox.com/security/data/cve/CVE-2026-8577.md) | High | Chromium: CVE-2026-8577 Integer overflow in Fonts | 8.8 | 0.0025 | | | [CVE-2026-8569](https://patchblox.com/security/data/cve/CVE-2026-8569.md) | High | Chromium: CVE-2026-8569 Out of bounds write in Codecs | 8.3 | 0.0025 | | | [CVE-2026-8514](https://patchblox.com/security/data/cve/CVE-2026-8514.md) | High | Chromium: CVE-2026-8514 Use after free in Aura | 8.3 | 0.0021 | | | [CVE-2026-8515](https://patchblox.com/security/data/cve/CVE-2026-8515.md) | High | Chromium: CVE-2026-8515 Use after free in HID | 8.3 | 0.0021 | | | [CVE-2026-8523](https://patchblox.com/security/data/cve/CVE-2026-8523.md) | High | Chromium: CVE-2026-8523 Use after free in Mojo | 8.3 | 0.0021 | | | [CVE-2026-8533](https://patchblox.com/security/data/cve/CVE-2026-8533.md) | High | Chromium: CVE-2026-8533 Use after free in Accessibility | 8.3 | 0.0021 | | | [CVE-2026-8548](https://patchblox.com/security/data/cve/CVE-2026-8548.md) | High | Chromium: CVE-2026-8548 Out of bounds write in Media | 8.3 | 0.0021 | | | [CVE-2026-8557](https://patchblox.com/security/data/cve/CVE-2026-8557.md) | High | Chromium: CVE-2026-8557 Use after free in Accessibility | 7.5 | 0.0021 | | | [CVE-2026-8575](https://patchblox.com/security/data/cve/CVE-2026-8575.md) | High | Chromium: CVE-2026-8575 Use after free in UI | 8.3 | 0.0018 | | | [CVE-2026-8587](https://patchblox.com/security/data/cve/CVE-2026-8587.md) | High | Chromium: CVE-2026-8587 Use after free in Extensions | 8.8 | 0.0018 | | | [CVE-2026-8520](https://patchblox.com/security/data/cve/CVE-2026-8520.md) | High | Chromium: CVE-2026-8520 Race in Payments | 8.3 | 0.0017 | | | [CVE-2026-8521](https://patchblox.com/security/data/cve/CVE-2026-8521.md) | High | Chromium: CVE-2026-8521 Use after free in Tab Groups | 7.5 | 0.0016 | | | [CVE-2026-40416](https://patchblox.com/security/data/cve/CVE-2026-40416.md) | Routine | Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability | 4.3 | 0.0035 | | | [CVE-2026-9110](https://patchblox.com/security/data/cve/CVE-2026-9110.md) | Routine | Chromium: CVE-2026-9110 Inappropriate implementation in UI | 4.2 | 0.0034 | | | [CVE-2026-9122](https://patchblox.com/security/data/cve/CVE-2026-9122.md) | Routine | Chromium: CVE-2026-9121 Out of bounds read in GPU | 6.5 | 0.0027 | | | [CVE-2026-9124](https://patchblox.com/security/data/cve/CVE-2026-9124.md) | Routine | Chromium: CVE-2026-9123 Heap buffer overflow in Chromecast | 5.3 | 0.0026 | | | [CVE-2026-8543](https://patchblox.com/security/data/cve/CVE-2026-8543.md) | Routine | Chromium: CVE-2026-8543 Out of bounds read in FileSystem | 5.3 | 0.0026 | | | [CVE-2026-8560](https://patchblox.com/security/data/cve/CVE-2026-8560.md) | Routine | Chromium: CVE-2026-8560 Heap buffer overflow in SwiftShader | 4.3 | 0.0025 | | | [CVE-2026-8570](https://patchblox.com/security/data/cve/CVE-2026-8570.md) | Routine | Chromium: CVE-2026-8570 Type Confusion in V8 | 6.5 | 0.0025 | | | [CVE-2026-42838](https://patchblox.com/security/data/cve/CVE-2026-42838.md) | Routine | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 5.4 | 0.0024 | | | [CVE-2026-8550](https://patchblox.com/security/data/cve/CVE-2026-8550.md) | Routine | Chromium: CVE-2026-8550 Use after free in Google Lens | 6.5 | 0.0023 | | | [CVE-2026-9115](https://patchblox.com/security/data/cve/CVE-2026-9115.md) | Routine | Chromium: CVE-2026-9115 Insufficient policy enforcement in Service Worker | 4.3 | 0.0022 | | | [CVE-2026-8516](https://patchblox.com/security/data/cve/CVE-2026-8516.md) | Routine | Chromium: CVE-2026-8516 Insufficient validation of untrusted input in DataTransfer | 5.3 | 0.0022 | | | [CVE-2026-9113](https://patchblox.com/security/data/cve/CVE-2026-9113.md) | Routine | Chromium: CVE-2026-9113 Out of bounds read in GPU | 4.3 | 0.0022 | | | [CVE-2026-9116](https://patchblox.com/security/data/cve/CVE-2026-9116.md) | Routine | Chromium: CVE-2026-9116 Insufficient policy enforcement in ServiceWorker | 4.3 | 0.0022 | | | [CVE-2026-8541](https://patchblox.com/security/data/cve/CVE-2026-8541.md) | Routine | Chromium: CVE-2026-8541 Out of bounds read in UI | 5.3 | 0.0021 | | | [CVE-2026-8546](https://patchblox.com/security/data/cve/CVE-2026-8546.md) | Routine | Chromium: CVE-2026-8546 Out of bounds read in GPU | 5.3 | 0.0021 | | | [CVE-2026-8528](https://patchblox.com/security/data/cve/CVE-2026-8528.md) | Routine | Chromium: CVE-2026-8528 Insufficient validation of untrusted input in SiteIsolation | 4.3 | 0.0020 | | | [CVE-2026-8538](https://patchblox.com/security/data/cve/CVE-2026-8538.md) | Routine | Chromium: CVE-2026-8538 Insufficient validation of untrusted input in GPU | 5.3 | 0.0020 | | | [CVE-2026-8582](https://patchblox.com/security/data/cve/CVE-2026-8582.md) | Routine | Chromium: CVE-2026-8582 Object lifecycle issue in Dawn | 5.3 | 0.0019 | | | [CVE-2026-8562](https://patchblox.com/security/data/cve/CVE-2026-8562.md) | Routine | Chromium: CVE-2026-8562 Side-channel information leakage in Navigation | 4.3 | 0.0019 | | | [CVE-2026-8536](https://patchblox.com/security/data/cve/CVE-2026-8536.md) | Routine | Chromium: CVE-2026-8536 Insufficient validation of untrusted input in ReadingMode | 3.1 | 0.0019 | | | [CVE-2026-8561](https://patchblox.com/security/data/cve/CVE-2026-8561.md) | Routine | Chromium: CVE-2026-8561 Incorrect security UI in Fullscreen | 5.4 | 0.0018 | | | [CVE-2026-8537](https://patchblox.com/security/data/cve/CVE-2026-8537.md) | Routine | Chromium: CVE-2026-8537 Insufficient policy enforcement in ViewTransitions | 4.3 | 0.0018 | | | [CVE-2026-8564](https://patchblox.com/security/data/cve/CVE-2026-8564.md) | Routine | Chromium: CVE-2026-8564 Incorrect security UI in Downloads | 4.2 | 0.0016 | | | [CVE-2026-8545](https://patchblox.com/security/data/cve/CVE-2026-8545.md) | Routine | Chromium: CVE-2026-8545 Object corruption in Compositing | 3.1 | 0.0016 | | | [CVE-2026-8553](https://patchblox.com/security/data/cve/CVE-2026-8553.md) | Routine | Chromium: CVE-2026-8553 Use after free in GPU | 3.1 | 0.0016 | | | [CVE-2026-8565](https://patchblox.com/security/data/cve/CVE-2026-8565.md) | Routine | Chromium: CVE-2026-8565 Inappropriate implementation in Downloads | 4.7 | 0.0013 | | | [CVE-2026-8586](https://patchblox.com/security/data/cve/CVE-2026-8586.md) | Routine | Chromium: CVE-2026-8586 Inappropriate implementation in Chromoting | 5.5 | 0.0010 | | --- Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.