# Microsoft Edge 150.0.4078.65 Microsoft Edge 150.0.4078.65, released July 9, 2026, fixes 28 CVEs in Microsoft Edge. None of them is reported as exploited. Patch Radar priority: Urgent. The latest Microsoft Edge is 156.0.4314.58, which also fixes every one of these CVEs. - Web page: https://patchblox.com/security/fix/windows-app/microsoft.edge-150.0.4078.65 - Platform: Windows apps - Released: Jul 9, 2026 - Priority: Urgent (Closes CVE-2026-15109, rated Critical) - CVEs: 28, exploited: 0, on CISA KEV: 0 - Superseded by: [Microsoft Edge 156.0.4314.58](https://patchblox.com/security/data/product/windows-app/microsoft-edge.md), the latest version, which also fixes every CVE listed here ## Applies to | Product | Release | Fixed in | |---|---|---| | [Microsoft Edge](https://patchblox.com/security/data/product/windows-app/microsoft-edge.md) | | 150.0.4078.65 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-15109](https://patchblox.com/security/data/cve/CVE-2026-15109.md) | Urgent | Chromium: CVE-2026-15109 Uninitialized Use in ANGLE | 9.6 | 0.0029 | | | [CVE-2026-15121](https://patchblox.com/security/data/cve/CVE-2026-15121.md) | High | Chromium: CVE-2026-15121 Use after free in WebRTC | 8.8 | 0.0052 | | | [CVE-2026-58525](https://patchblox.com/security/data/cve/CVE-2026-58525.md) | High | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | 8.2 | 0.0051 | | | [CVE-2026-15132](https://patchblox.com/security/data/cve/CVE-2026-15132.md) | High | Chromium: CVE-2026-15132 Uninitialized Use in V8 | 8.8 | 0.0045 | | | [CVE-2026-15107](https://patchblox.com/security/data/cve/CVE-2026-15107.md) | High | Chromium: CVE-2026-15107 Use after free in IndexedDB | 8.8 | 0.0041 | | | [CVE-2026-15116](https://patchblox.com/security/data/cve/CVE-2026-15116.md) | High | Chromium: CVE-2026-15116 Use after free in Actor | 8.8 | 0.0041 | | | [CVE-2026-15118](https://patchblox.com/security/data/cve/CVE-2026-15118.md) | High | Chromium: CVE-2026-15118 Use after free in Input | 8.8 | 0.0041 | | | [CVE-2026-15126](https://patchblox.com/security/data/cve/CVE-2026-15126.md) | High | Chromium: CVE-2026-15126 Use after free in Forms | 8.8 | 0.0041 | | | [CVE-2026-15133](https://patchblox.com/security/data/cve/CVE-2026-15133.md) | High | Chromium: CVE-2026-15133 Use after free in InterestGroups | 8.8 | 0.0041 | | | [CVE-2026-15125](https://patchblox.com/security/data/cve/CVE-2026-15125.md) | High | Chromium: CVE-2026-15125 Inappropriate implementation in Forms | 8.8 | 0.0040 | | | [CVE-2026-15112](https://patchblox.com/security/data/cve/CVE-2026-15112.md) | High | Chromium: CVE-2026-15112 Use after free in Ozone | 8.8 | 0.0035 | | | [CVE-2026-15123](https://patchblox.com/security/data/cve/CVE-2026-15123.md) | High | Chromium: CVE-2026-15123 Insufficient data validation in DOM | 8.8 | 0.0035 | | | [CVE-2026-15129](https://patchblox.com/security/data/cve/CVE-2026-15129.md) | High | Chromium: CVE-2026-15129 Use after free in Views | 8.8 | 0.0035 | | | [CVE-2026-15122](https://patchblox.com/security/data/cve/CVE-2026-15122.md) | High | Chromium: CVE-2026-15122 Insufficient validation of untrusted input in Codecs | 8.3 | 0.0032 | | | [CVE-2026-15114](https://patchblox.com/security/data/cve/CVE-2026-15114.md) | High | Chromium: CVE-2026-15114 Out of bounds read and write in Codecs | 8.8 | 0.0032 | | | [CVE-2026-15120](https://patchblox.com/security/data/cve/CVE-2026-15120.md) | High | Chromium: CVE-2026-15120 Use after free in Core | 8.3 | 0.0030 | | | [CVE-2026-15111](https://patchblox.com/security/data/cve/CVE-2026-15111.md) | High | Chromium: CVE-2026-15111 Use after free in Views | 7.5 | 0.0030 | | | [CVE-2026-15117](https://patchblox.com/security/data/cve/CVE-2026-15117.md) | High | Chromium: CVE-2026-15117 Use after free in Payments | 7.5 | 0.0030 | | | [CVE-2026-15110](https://patchblox.com/security/data/cve/CVE-2026-15110.md) | High | Chromium: CVE-2026-15110 Use after free in Extensions | 8.8 | 0.0026 | | | [CVE-2026-15119](https://patchblox.com/security/data/cve/CVE-2026-15119.md) | High | Chromium: CVE-2026-15119 Inappropriate implementation in GetUserMedia | 8.3 | 0.0024 | | | [CVE-2026-70331](https://patchblox.com/security/data/cve/CVE-2026-70331.md) | Routine | Microsoft Edge for iOS Spoofing Vulnerability | 5.4 | 0.0041 | | | [CVE-2026-15124](https://patchblox.com/security/data/cve/CVE-2026-15124.md) | Routine | Chromium: CVE-2026-15124 Insufficient policy enforcement in Passwords | 4.3 | 0.0027 | | | [CVE-2026-15130](https://patchblox.com/security/data/cve/CVE-2026-15130.md) | Routine | Chromium: CVE-2026-15130 Insufficient policy enforcement in Navigation | 4.3 | 0.0027 | | | [CVE-2026-15131](https://patchblox.com/security/data/cve/CVE-2026-15131.md) | Routine | Chromium: CVE-2026-15131 Insufficient data validation in Navigation | 4.3 | 0.0027 | | | [CVE-2026-15127](https://patchblox.com/security/data/cve/CVE-2026-15127.md) | Routine | Chromium: CVE-2026-15127 Inappropriate implementation in WebGL | 6.1 | 0.0022 | | | [CVE-2026-15128](https://patchblox.com/security/data/cve/CVE-2026-15128.md) | Routine | Chromium: CVE-2026-15128 Inappropriate implementation in Forms | 6.1 | 0.0022 | | | [CVE-2026-70309](https://patchblox.com/security/data/cve/CVE-2026-70309.md) | Routine | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | 5.4 | 0.0021 | | | [CVE-2026-15108](https://patchblox.com/security/data/cve/CVE-2026-15108.md) | Routine | Chromium: CVE-2026-15108 Integer overflow in Extensions API | 4.3 | 0.0020 | | --- Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.