# Microsoft Edge 154.0.4258.37 Microsoft Edge 154.0.4258.37, released September 24, 2026, fixes 31 CVEs in Microsoft Edge. None of them is reported as exploited. Patch Radar priority: Urgent. The latest Microsoft Edge is 156.0.4314.58, which also fixes every one of these CVEs. - Web page: https://patchblox.com/security/fix/windows-app/microsoft.edge-154.0.4258.37 - Platform: Windows apps - Released: Sep 24, 2026 - Priority: Urgent (Closes CVE-2026-95356, rated Critical) - CVEs: 31, exploited: 0, on CISA KEV: 0 - Superseded by: [Microsoft Edge 156.0.4314.58](https://patchblox.com/security/data/product/windows-app/microsoft-edge.md), the latest version, which also fixes every CVE listed here ## Applies to | Product | Release | Fixed in | |---|---|---| | [Microsoft Edge](https://patchblox.com/security/data/product/windows-app/microsoft-edge.md) | | 154.0.4258.37 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-95356](https://patchblox.com/security/data/cve/CVE-2026-95356.md) | Urgent | Chromium CVE-2026-95356: Use after free in WindowDialog | 9.6 | 0.0042 | | | [CVE-2026-85890](https://patchblox.com/security/data/cve/CVE-2026-85890.md) | High | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 8.8 | 0.0057 | | | [CVE-2026-85897](https://patchblox.com/security/data/cve/CVE-2026-85897.md) | High | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 8.8 | 0.0057 | | | [CVE-2026-96198](https://patchblox.com/security/data/cve/CVE-2026-96198.md) | High | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 8.8 | 0.0057 | | | [CVE-2026-96199](https://patchblox.com/security/data/cve/CVE-2026-96199.md) | High | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 8.8 | 0.0057 | | | [CVE-2026-95276](https://patchblox.com/security/data/cve/CVE-2026-95276.md) | High | Chromium CVE-2026-95276: Improper input validation in Themes | 8.3 | 0.0040 | | | [CVE-2026-95277](https://patchblox.com/security/data/cve/CVE-2026-95277.md) | High | Chromium CVE-2026-95277: Use after free in Views | 9.6 | 0.0035 | | | [CVE-2026-95345](https://patchblox.com/security/data/cve/CVE-2026-95345.md) | High | Chromium CVE-2026-95345: Use after free in Actor | 8.8 | 0.0034 | | | [CVE-2026-95331](https://patchblox.com/security/data/cve/CVE-2026-95331.md) | High | Chromium CVE-2026-95331: Out of bounds write in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-95319](https://patchblox.com/security/data/cve/CVE-2026-95319.md) | High | Chromium CVE-2026-95319: Use after free in Printing | 8.3 | 0.0030 | | | [CVE-2026-95381](https://patchblox.com/security/data/cve/CVE-2026-95381.md) | High | Chromium CVE-2026-95381: Improper input validation in Printing | 8.3 | 0.0030 | | | [CVE-2026-95351](https://patchblox.com/security/data/cve/CVE-2026-95351.md) | High | Chromium CVE-2026-95351: Use after free in Views | 8.3 | 0.0028 | | | [CVE-2026-95338](https://patchblox.com/security/data/cve/CVE-2026-95338.md) | High | Chromium CVE-2026-95338: Use after free in PDFium | 8.8 | 0.0028 | | | [CVE-2026-95301](https://patchblox.com/security/data/cve/CVE-2026-95301.md) | High | Chromium CVE-2026-95301: Missing authorization in Extensions | 8.1 | 0.0026 | | | [CVE-2026-95344](https://patchblox.com/security/data/cve/CVE-2026-95344.md) | High | Chromium CVE-2026-95344: Race condition in DevTools | 8.0 | 0.0019 | | | [CVE-2026-95376](https://patchblox.com/security/data/cve/CVE-2026-95376.md) | High | Chromium CVE-2026-95376: Externally controlled reference in DevTools | 8.0 | 0.0017 | | | [CVE-2026-95315](https://patchblox.com/security/data/cve/CVE-2026-95315.md) | High | Chromium CVE-2026-95315: Use after free in Aura | 7.8 | 0.0015 | | | [CVE-2026-88090](https://patchblox.com/security/data/cve/CVE-2026-88090.md) | Routine | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 5.4 | 0.0031 | | | [CVE-2026-95303](https://patchblox.com/security/data/cve/CVE-2026-95303.md) | Routine | Chromium CVE-2026-95303: Incomplete cleanup in SmartCard | 6.5 | 0.0028 | | | [CVE-2026-95346](https://patchblox.com/security/data/cve/CVE-2026-95346.md) | Routine | Chromium CVE-2026-95346: UI misrepresentation in Chromoting | 4.8 | 0.0028 | | | [CVE-2026-95297](https://patchblox.com/security/data/cve/CVE-2026-95297.md) | Routine | Chromium CVE-2026-95297: Missing authorization in Contextual Tasks | 6.5 | 0.0023 | | | [CVE-2026-95305](https://patchblox.com/security/data/cve/CVE-2026-95305.md) | Routine | Chromium CVE-2026-95305: UI misrepresentation in Chromoting | 4.8 | 0.0023 | | | [CVE-2026-95294](https://patchblox.com/security/data/cve/CVE-2026-95294.md) | Routine | Chromium CVE-2026-95294: UI misrepresentation in Browser | 5.4 | 0.0021 | | | [CVE-2026-95307](https://patchblox.com/security/data/cve/CVE-2026-95307.md) | Routine | Chromium CVE-2026-95307: UI misrepresentation in ExtensionsMenu | 5.4 | 0.0021 | | | [CVE-2026-95385](https://patchblox.com/security/data/cve/CVE-2026-95385.md) | Routine | Chromium CVE-2026-95385: Inappropriate implementation in PlatformIntegration | 6.5 | 0.0021 | | | [CVE-2026-95364](https://patchblox.com/security/data/cve/CVE-2026-95364.md) | Routine | Chromium CVE-2026-95364: Improper input validation in Passwords | 5.4 | 0.0021 | | | [CVE-2026-95312](https://patchblox.com/security/data/cve/CVE-2026-95312.md) | Routine | Chromium CVE-2026-95312: Information leak in Passwords | 3.1 | 0.0021 | | | [CVE-2026-95292](https://patchblox.com/security/data/cve/CVE-2026-95292.md) | Routine | Chromium CVE-2026-95292: Incorrect authorization in Safebrowsing | 4.8 | 0.0018 | | | [CVE-2026-95317](https://patchblox.com/security/data/cve/CVE-2026-95317.md) | Routine | Chromium CVE-2026-95317: Incorrect authorization in MediaCapture | 3.1 | 0.0017 | | | [CVE-2026-95375](https://patchblox.com/security/data/cve/CVE-2026-95375.md) | Routine | Chromium CVE-2026-95375: Incorrect authorization in BrowserTag | 6.3 | 0.0016 | | | [CVE-2026-95316](https://patchblox.com/security/data/cve/CVE-2026-95316.md) | Routine | Chromium CVE-2026-95316: Unchecked return value in Performance | 2.9 | 0.0013 | | --- Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.