# Microsoft Edge 147.0.3912.60 Microsoft Edge 147.0.3912.60, released April 10, 2026, fixes 57 CVEs in Microsoft Edge. None of them is reported as exploited. Patch Radar priority: Urgent. The latest Microsoft Edge is 156.0.4314.58, which also fixes every one of these CVEs. - Web page: https://patchblox.com/security/fix/windows-app/microsoft.edge-147.0.3912.60 - Platform: Windows apps - Released: Apr 10, 2026 - Priority: Urgent (Closes CVE-2026-5874, rated Critical) - CVEs: 57, exploited: 0, on CISA KEV: 0 - Superseded by: [Microsoft Edge 156.0.4314.58](https://patchblox.com/security/data/product/windows-app/microsoft-edge.md), the latest version, which also fixes every CVE listed here ## Applies to | Product | Release | Fixed in | |---|---|---| | [Microsoft Edge](https://patchblox.com/security/data/product/windows-app/microsoft-edge.md) | | 147.0.3912.60 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-5874](https://patchblox.com/security/data/cve/CVE-2026-5874.md) | Urgent | Chromium: CVE-2026-5874 Use after free in PrivateAI | 9.6 | 0.0026 | | | [CVE-2026-5902](https://patchblox.com/security/data/cve/CVE-2026-5902.md) | Urgent | Chromium: CVE-2026-5902 Race in Media | 9.8 | 0.0022 | | | [CVE-2026-5858](https://patchblox.com/security/data/cve/CVE-2026-5858.md) | High | Chromium: CVE-2026-5858 Heap buffer overflow in WebML | 8.8 | 0.0062 | | | [CVE-2026-5865](https://patchblox.com/security/data/cve/CVE-2026-5865.md) | High | Chromium: CVE-2026-5865 Type Confusion in V8 | 8.8 | 0.0052 | | | [CVE-2026-5860](https://patchblox.com/security/data/cve/CVE-2026-5860.md) | High | Chromium: CVE-2026-5860 Use after free in WebRTC | 8.8 | 0.0050 | | | [CVE-2026-5873](https://patchblox.com/security/data/cve/CVE-2026-5873.md) | High | Chromium: CVE-2026-5873 Out of bounds read and write in V8 | 8.8 | 0.0039 | | | [CVE-2026-5859](https://patchblox.com/security/data/cve/CVE-2026-5859.md) | High | Chromium: CVE-2026-5859 Integer overflow in WebML | 8.8 | 0.0036 | | | [CVE-2026-5871](https://patchblox.com/security/data/cve/CVE-2026-5871.md) | High | Chromium: CVE-2026-5871 Type Confusion in V8 | 8.8 | 0.0034 | | | [CVE-2026-5870](https://patchblox.com/security/data/cve/CVE-2026-5870.md) | High | Chromium: CVE-2026-5870 Integer overflow in Skia | 9.6 | 0.0033 | | | [CVE-2026-5861](https://patchblox.com/security/data/cve/CVE-2026-5861.md) | High | Chromium: CVE-2026-5861 Use after free in V8 | 8.8 | 0.0032 | | | [CVE-2026-5862](https://patchblox.com/security/data/cve/CVE-2026-5862.md) | High | Chromium: CVE-2026-5862 Inappropriate implementation in V8 | 8.8 | 0.0032 | | | [CVE-2026-5866](https://patchblox.com/security/data/cve/CVE-2026-5866.md) | High | Chromium: CVE-2026-5866 Use after free in Media | 8.8 | 0.0032 | | | [CVE-2026-5872](https://patchblox.com/security/data/cve/CVE-2026-5872.md) | High | Chromium: CVE-2026-5872 Use after free in Blink | 8.8 | 0.0032 | | | [CVE-2026-5877](https://patchblox.com/security/data/cve/CVE-2026-5877.md) | High | Chromium: CVE-2026-5877 Use after free in Navigation | 8.8 | 0.0032 | | | [CVE-2026-5863](https://patchblox.com/security/data/cve/CVE-2026-5863.md) | High | Chromium: CVE-2026-5863 Inappropriate implementation in V8 | 8.8 | 0.0030 | | | [CVE-2026-5883](https://patchblox.com/security/data/cve/CVE-2026-5883.md) | High | Chromium: CVE-2026-5883 Use after free in Media | 8.8 | 0.0030 | | | [CVE-2026-5884](https://patchblox.com/security/data/cve/CVE-2026-5884.md) | High | Chromium: CVE-2026-5884 Insufficient validation of untrusted input in Media | 8.8 | 0.0030 | | | [CVE-2026-5912](https://patchblox.com/security/data/cve/CVE-2026-5912.md) | High | Chromium: CVE-2026-5912 Integer overflow in WebRTC | 8.8 | 0.0022 | | | [CVE-2026-5913](https://patchblox.com/security/data/cve/CVE-2026-5913.md) | High | Chromium: CVE-2026-5913 Out of bounds read in Blink | 8.1 | 0.0021 | | | [CVE-2026-5908](https://patchblox.com/security/data/cve/CVE-2026-5908.md) | High | Chromium: CVE-2026-5908 Integer overflow in Media | 8.8 | 0.0020 | | | [CVE-2026-5909](https://patchblox.com/security/data/cve/CVE-2026-5909.md) | High | Chromium: CVE-2026-5909 Integer overflow in Media | 8.8 | 0.0020 | | | [CVE-2026-5910](https://patchblox.com/security/data/cve/CVE-2026-5910.md) | High | Chromium: CVE-2026-5910 Integer overflow in Media | 8.8 | 0.0020 | | | [CVE-2026-5915](https://patchblox.com/security/data/cve/CVE-2026-5915.md) | High | Chromium: CVE-2026-5915 Insufficient validation of untrusted input in WebML | 8.1 | 0.0020 | | | [CVE-2026-5907](https://patchblox.com/security/data/cve/CVE-2026-5907.md) | High | Chromium: CVE-2026-5907 Insufficient data validation in Media | 8.1 | 0.0020 | | | [CVE-2026-5914](https://patchblox.com/security/data/cve/CVE-2026-5914.md) | High | Chromium: CVE-2026-5914 Type Confusion in CSS | 8.8 | 0.0017 | | | [CVE-2026-33118](https://patchblox.com/security/data/cve/CVE-2026-33118.md) | Routine | Microsoft Edge (Chromium-based) Spoofing Vulnerability | 4.3 | 0.0056 | | | [CVE-2026-5867](https://patchblox.com/security/data/cve/CVE-2026-5867.md) | Routine | Chromium: CVE-2026-5867 Heap buffer overflow in WebML | 4.3 | 0.0030 | | | [CVE-2026-5903](https://patchblox.com/security/data/cve/CVE-2026-5903.md) | Routine | Chromium: CVE-2026-5903 Policy bypass in IFrameSandbox | 6.5 | 0.0027 | | | [CVE-2026-5888](https://patchblox.com/security/data/cve/CVE-2026-5888.md) | Routine | Chromium: CVE-2026-5888 Uninitialized Use in WebCodecs | 6.5 | 0.0027 | | | [CVE-2026-5876](https://patchblox.com/security/data/cve/CVE-2026-5876.md) | Routine | Chromium: CVE-2026-5876 Side-channel information leakage in Navigation | 6.5 | 0.0026 | | | [CVE-2026-5864](https://patchblox.com/security/data/cve/CVE-2026-5864.md) | Routine | Chromium: CVE-2026-5864 Heap buffer overflow in WebAudio | 4.3 | 0.0025 | | | [CVE-2026-5869](https://patchblox.com/security/data/cve/CVE-2026-5869.md) | Routine | Chromium: CVE-2026-5869 Heap buffer overflow in WebML | 4.3 | 0.0025 | | | [CVE-2026-5885](https://patchblox.com/security/data/cve/CVE-2026-5885.md) | Routine | Chromium: CVE-2026-5885 Insufficient validation of untrusted input in WebML | 6.5 | 0.0025 | | | [CVE-2026-5881](https://patchblox.com/security/data/cve/CVE-2026-5881.md) | Routine | Chromium: CVE-2026-5881 Policy bypass in LocalNetworkAccess | 6.5 | 0.0023 | | | [CVE-2026-5891](https://patchblox.com/security/data/cve/CVE-2026-5891.md) | Routine | Chromium: CVE-2026-5891 Insufficient policy enforcement in browser UI | 4.3 | 0.0021 | | | [CVE-2026-5919](https://patchblox.com/security/data/cve/CVE-2026-5919.md) | Routine | Chromium: CVE-2026-5919 Insufficient validation of untrusted input in WebSockets | 6.5 | 0.0020 | | | [CVE-2026-5878](https://patchblox.com/security/data/cve/CVE-2026-5878.md) | Routine | Chromium: CVE-2026-5878 Incorrect security UI in Blink | 4.3 | 0.0020 | | | [CVE-2026-5880](https://patchblox.com/security/data/cve/CVE-2026-5880.md) | Routine | Chromium: CVE-2026-5880 Incorrect security UI in browser UI | 4.3 | 0.0020 | | | [CVE-2026-5882](https://patchblox.com/security/data/cve/CVE-2026-5882.md) | Routine | Chromium: CVE-2026-5882 Incorrect security UI in Fullscreen | 4.3 | 0.0020 | | | [CVE-2026-5875](https://patchblox.com/security/data/cve/CVE-2026-5875.md) | Routine | Chromium: CVE-2026-5875 Policy bypass in Blink | 4.3 | 0.0020 | | | [CVE-2026-5887](https://patchblox.com/security/data/cve/CVE-2026-5887.md) | Routine | Chromium: CVE-2026-5887 Insufficient validation of untrusted input in Downloads | 4.3 | 0.0020 | | | [CVE-2026-5905](https://patchblox.com/security/data/cve/CVE-2026-5905.md) | Routine | Chromium: CVE-2026-5905 Incorrect security UI in Permissions | 6.5 | 0.0019 | | | [CVE-2026-5890](https://patchblox.com/security/data/cve/CVE-2026-5890.md) | Routine | Chromium: CVE-2026-5890 Race in WebCodecs | 5.3 | 0.0019 | | | [CVE-2026-5892](https://patchblox.com/security/data/cve/CVE-2026-5892.md) | Routine | Chromium: CVE-2026-5892 Insufficient policy enforcement in PWAs | 6.6 | 0.0018 | | | [CVE-2026-5898](https://patchblox.com/security/data/cve/CVE-2026-5898.md) | Routine | Chromium: CVE-2026-5898 Incorrect security UI in Omnibox | 4.3 | 0.0018 | | | [CVE-2026-5911](https://patchblox.com/security/data/cve/CVE-2026-5911.md) | Routine | Chromium: CVE-2026-5911 Policy bypass in ServiceWorkers | 4.3 | 0.0017 | | | [CVE-2026-5906](https://patchblox.com/security/data/cve/CVE-2026-5906.md) | Routine | Chromium: CVE-2026-5906 Incorrect security UI in Omnibox | 4.3 | 0.0017 | | | [CVE-2026-5894](https://patchblox.com/security/data/cve/CVE-2026-5894.md) | Routine | Chromium: CVE-2026-5894 Inappropriate implementation in PDF | 4.3 | 0.0017 | | | [CVE-2026-5900](https://patchblox.com/security/data/cve/CVE-2026-5900.md) | Routine | Chromium: CVE-2026-5900 Policy bypass in Downloads | 4.3 | 0.0017 | | | [CVE-2026-5895](https://patchblox.com/security/data/cve/CVE-2026-5895.md) | Routine | Chromium: CVE-2026-5895 Incorrect security UI in Omnibox | 5.4 | 0.0016 | | | [CVE-2026-5918](https://patchblox.com/security/data/cve/CVE-2026-5918.md) | Routine | Chromium: CVE-2026-5918 Inappropriate implementation in Navigation | 4.3 | 0.0016 | | | [CVE-2026-5896](https://patchblox.com/security/data/cve/CVE-2026-5896.md) | Routine | Chromium: CVE-2026-5896 Policy bypass in Audio | 6.1 | 0.0016 | | | [CVE-2026-5897](https://patchblox.com/security/data/cve/CVE-2026-5897.md) | Routine | Chromium: CVE-2026-5897 Incorrect security UI in Downloads | 4.3 | 0.0016 | | | [CVE-2026-5893](https://patchblox.com/security/data/cve/CVE-2026-5893.md) | Routine | Chromium: CVE-2026-5893 Race in V8 | 6.8 | 0.0016 | | | [CVE-2026-5901](https://patchblox.com/security/data/cve/CVE-2026-5901.md) | Routine | Chromium: CVE-2026-5901 Policy bypass in DevTools | 6.5 | 0.0014 | | | [CVE-2026-5899](https://patchblox.com/security/data/cve/CVE-2026-5899.md) | Routine | Chromium: CVE-2026-5899 Incorrect security UI in History Navigation | 6.1 | 0.0014 | | | [CVE-2026-5889](https://patchblox.com/security/data/cve/CVE-2026-5889.md) | Routine | Chromium: CVE-2026-5889 Cryptographic Flaw in PDFium | 4.3 | 0.0011 | | --- Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.