{
  "fix": "Microsoft Edge 154.0.4258.37",
  "url": "https://patchblox.com/security/fix/macos/com.microsoft.edgemac-154.0.4258.37",
  "summary": "Microsoft Edge 154.0.4258.37, released September 24, 2026, fixes 32 CVEs in Microsoft Edge. None of them is reported as exploited. Patch Radar priority: Urgent. The latest Microsoft Edge is 157.0.4341.42, which also fixes every one of these CVEs.",
  "platform": "macos",
  "type": "app-version",
  "title": "Microsoft Edge 154.0.4258.37",
  "released": "2026-09-24T03:13:16Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-95356, rated Critical",
  "supported": true,
  "cveCount": 32,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00573,
  "maxCvss": 9.6,
  "appliesTo": [
    {
      "product": "Microsoft Edge",
      "productUrl": "https://patchblox.com/security/product/macos/microsoft-edge",
      "fixedVersion": "154.0.4258.37",
      "latestVersion": "157.0.4341.42",
      "supported": true
    }
  ],
  "supersededBy": {
    "product": "Microsoft Edge",
    "latestVersion": "157.0.4341.42",
    "productUrl": "https://patchblox.com/security/product/macos/microsoft-edge"
  },
  "cves": [
    {
      "cveId": "CVE-2026-95356",
      "url": "https://patchblox.com/security/cve/CVE-2026-95356",
      "title": "Chromium CVE-2026-95356: Use after free in WindowDialog",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.6,
      "epss": 0.00415,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-85890",
      "url": "https://patchblox.com/security/cve/CVE-2026-85890",
      "title": "Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00573,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-85897",
      "url": "https://patchblox.com/security/cve/CVE-2026-85897",
      "title": "Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00573,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96198",
      "url": "https://patchblox.com/security/cve/CVE-2026-96198",
      "title": "Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00573,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-96199",
      "url": "https://patchblox.com/security/cve/CVE-2026-96199",
      "title": "Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00573,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95276",
      "url": "https://patchblox.com/security/cve/CVE-2026-95276",
      "title": "Chromium CVE-2026-95276: Improper input validation in Themes",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.3,
      "epss": 0.00398,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95277",
      "url": "https://patchblox.com/security/cve/CVE-2026-95277",
      "title": "Chromium CVE-2026-95277: Use after free in Views",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.6,
      "epss": 0.00345,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95345",
      "url": "https://patchblox.com/security/cve/CVE-2026-95345",
      "title": "Chromium CVE-2026-95345: Use after free in Actor",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00339,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95331",
      "url": "https://patchblox.com/security/cve/CVE-2026-95331",
      "title": "Chromium CVE-2026-95331: Out of bounds write in ANGLE",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.6,
      "epss": 0.00338,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95347",
      "url": "https://patchblox.com/security/cve/CVE-2026-95347",
      "title": "Chromium CVE-2026-95347: Use after free in Updater",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.6,
      "epss": 0.00306,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95319",
      "url": "https://patchblox.com/security/cve/CVE-2026-95319",
      "title": "Chromium CVE-2026-95319: Use after free in Printing",
      "priority": "High",
      "severity": "Low",
      "cvss": 8.3,
      "epss": 0.00296,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95381",
      "url": "https://patchblox.com/security/cve/CVE-2026-95381",
      "title": "Chromium CVE-2026-95381: Improper input validation in Printing",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.3,
      "epss": 0.00295,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95351",
      "url": "https://patchblox.com/security/cve/CVE-2026-95351",
      "title": "Chromium CVE-2026-95351: Use after free in Views",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.3,
      "epss": 0.00284,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95338",
      "url": "https://patchblox.com/security/cve/CVE-2026-95338",
      "title": "Chromium CVE-2026-95338: Use after free in PDFium",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.0028,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95301",
      "url": "https://patchblox.com/security/cve/CVE-2026-95301",
      "title": "Chromium CVE-2026-95301: Missing authorization in Extensions",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00264,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95344",
      "url": "https://patchblox.com/security/cve/CVE-2026-95344",
      "title": "Chromium CVE-2026-95344: Race condition in DevTools",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95376",
      "url": "https://patchblox.com/security/cve/CVE-2026-95376",
      "title": "Chromium CVE-2026-95376: Externally controlled reference in DevTools",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95315",
      "url": "https://patchblox.com/security/cve/CVE-2026-95315",
      "title": "Chromium CVE-2026-95315: Use after free in Aura",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-88090",
      "url": "https://patchblox.com/security/cve/CVE-2026-88090",
      "title": "Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.4,
      "epss": 0.00311,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95303",
      "url": "https://patchblox.com/security/cve/CVE-2026-95303",
      "title": "Chromium CVE-2026-95303: Incomplete cleanup in SmartCard",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.00277,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95346",
      "url": "https://patchblox.com/security/cve/CVE-2026-95346",
      "title": "Chromium CVE-2026-95346: UI misrepresentation in Chromoting",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.8,
      "epss": 0.00275,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95297",
      "url": "https://patchblox.com/security/cve/CVE-2026-95297",
      "title": "Chromium CVE-2026-95297: Missing authorization in Contextual Tasks",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.00229,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95305",
      "url": "https://patchblox.com/security/cve/CVE-2026-95305",
      "title": "Chromium CVE-2026-95305: UI misrepresentation in Chromoting",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 4.8,
      "epss": 0.00226,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95294",
      "url": "https://patchblox.com/security/cve/CVE-2026-95294",
      "title": "Chromium CVE-2026-95294: UI misrepresentation in Browser",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.4,
      "epss": 0.00214,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95307",
      "url": "https://patchblox.com/security/cve/CVE-2026-95307",
      "title": "Chromium CVE-2026-95307: UI misrepresentation in ExtensionsMenu",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 5.4,
      "epss": 0.00214,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95364",
      "url": "https://patchblox.com/security/cve/CVE-2026-95364",
      "title": "Chromium CVE-2026-95364: Improper input validation in Passwords",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 5.4,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95312",
      "url": "https://patchblox.com/security/cve/CVE-2026-95312",
      "title": "Chromium CVE-2026-95312: Information leak in Passwords",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 3.1,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95292",
      "url": "https://patchblox.com/security/cve/CVE-2026-95292",
      "title": "Chromium CVE-2026-95292: Incorrect authorization in Safebrowsing",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 4.8,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95317",
      "url": "https://patchblox.com/security/cve/CVE-2026-95317",
      "title": "Chromium CVE-2026-95317: Incorrect authorization in MediaCapture",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 3.1,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95371",
      "url": "https://patchblox.com/security/cve/CVE-2026-95371",
      "title": "Chromium CVE-2026-95371: Missing authorization in Views",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.4,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95375",
      "url": "https://patchblox.com/security/cve/CVE-2026-95375",
      "title": "Chromium CVE-2026-95375: Incorrect authorization in BrowserTag",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.3,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-95316",
      "url": "https://patchblox.com/security/cve/CVE-2026-95316",
      "title": "Chromium CVE-2026-95316: Unchecked return value in Performance",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 2.9,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T07:45:43Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}