# Microsoft Edge Beta 152.0.4191.51 Microsoft Edge Beta 152.0.4191.51, released August 26, 2026, fixes 54 CVEs in Microsoft Edge Beta. None of them is reported as exploited. Patch Radar priority: Urgent. The latest Microsoft Edge Beta is 158.0.4370.16, which also fixes every one of these CVEs. - Web page: https://patchblox.com/security/fix/windows-app/microsoft.edge.beta-152.0.4191.51 - Platform: Windows apps - Released: Aug 26, 2026 - Priority: Urgent (Closes CVE-2026-19166, rated Critical) - CVEs: 54, exploited: 0, on CISA KEV: 0 - Superseded by: [Microsoft Edge Beta 158.0.4370.16](https://patchblox.com/security/data/product/windows-app/microsoft-edge-beta.md), the latest version, which also fixes every CVE listed here ## Applies to | Product | Release | Fixed in | |---|---|---| | [Microsoft Edge Beta](https://patchblox.com/security/data/product/windows-app/microsoft-edge-beta.md) | | 152.0.4191.51 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-19166](https://patchblox.com/security/data/cve/CVE-2026-19166.md) | Urgent | CVE-2026-19166 Use after free in Web Authentication | 9.6 | 0.0039 | | | [CVE-2026-19164](https://patchblox.com/security/data/cve/CVE-2026-19164.md) | Urgent | CVE-2026-19164 Insufficient validation of untrusted input in Codecs | 9.6 | 0.0035 | | | [CVE-2026-19171](https://patchblox.com/security/data/cve/CVE-2026-19171.md) | Urgent | CVE-2026-19171 Use after free in Media | 9.6 | 0.0035 | | | [CVE-2026-19175](https://patchblox.com/security/data/cve/CVE-2026-19175.md) | Urgent | CVE-2026-19175 Use after free in Payments | 9.6 | 0.0035 | | | [CVE-2026-72970](https://patchblox.com/security/data/cve/CVE-2026-72970.md) | High | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 8.3 | 0.0073 | | | [CVE-2026-76034](https://patchblox.com/security/data/cve/CVE-2026-76034.md) | High | Chromium: CVE-2026-76034 Buffer overflow in WebGL | 8.8 | 0.0057 | | | [CVE-2026-19176](https://patchblox.com/security/data/cve/CVE-2026-19176.md) | High | CVE-2026-19176 Use after free in Skia | 9.6 | 0.0053 | | | [CVE-2026-76045](https://patchblox.com/security/data/cve/CVE-2026-76045.md) | High | Chromium: CVE-2026-76045 Use after free in WebGL | 8.8 | 0.0052 | | | [CVE-2026-76022](https://patchblox.com/security/data/cve/CVE-2026-76022.md) | High | Chromium CVE-2026-76022: Buffer overflow in Network | 8.8 | 0.0045 | | | [CVE-2026-76023](https://patchblox.com/security/data/cve/CVE-2026-76023.md) | High | Chromium CVE-2026-76023: Improper resource control in Linux Toolkit Theming | 8.8 | 0.0045 | | | [CVE-2026-76038](https://patchblox.com/security/data/cve/CVE-2026-76038.md) | High | Chromium: CVE-2026-76038 Type confusion in V8 | 8.8 | 0.0045 | | | [CVE-2026-76047](https://patchblox.com/security/data/cve/CVE-2026-76047.md) | High | Chromium: CVE-2026-76047 Type confusion in V8 | 8.8 | 0.0045 | | | [CVE-2026-19145](https://patchblox.com/security/data/cve/CVE-2026-19145.md) | High | CVE-2026-19145 Use after free in Translate | 8.8 | 0.0041 | | | [CVE-2026-19150](https://patchblox.com/security/data/cve/CVE-2026-19150.md) | High | CVE-2026-19150 Inappropriate implementation in V8 | 8.8 | 0.0041 | | | [CVE-2026-19151](https://patchblox.com/security/data/cve/CVE-2026-19151.md) | High | CVE-2026-19151 Use after free in V8 | 8.8 | 0.0041 | | | [CVE-2026-19162](https://patchblox.com/security/data/cve/CVE-2026-19162.md) | High | CVE-2026-19162 Out of bounds write in V8 | 8.8 | 0.0041 | | | [CVE-2026-19168](https://patchblox.com/security/data/cve/CVE-2026-19168.md) | High | CVE-2026-19168 Inappropriate implementation in V8 | 8.8 | 0.0041 | | | [CVE-2026-19174](https://patchblox.com/security/data/cve/CVE-2026-19174.md) | High | CVE-2026-19174 Integer overflow in V8 | 8.8 | 0.0041 | | | [CVE-2026-19556](https://patchblox.com/security/data/cve/CVE-2026-19556.md) | High | Chromium: CVE-2026-19556 Use after free in V8 | 8.8 | 0.0041 | | | [CVE-2026-19559](https://patchblox.com/security/data/cve/CVE-2026-19559.md) | High | Chromium: CVE-2026-19559 Use after free in HTML | 8.8 | 0.0041 | | | [CVE-2026-19560](https://patchblox.com/security/data/cve/CVE-2026-19560.md) | High | Chromium: CVE-2026-19560 Use after free in Blink | 8.8 | 0.0041 | | | [CVE-2026-76021](https://patchblox.com/security/data/cve/CVE-2026-76021.md) | High | Chromium CVE-2026-76021: Use after free in DOM | 8.8 | 0.0041 | | | [CVE-2026-76043](https://patchblox.com/security/data/cve/CVE-2026-76043.md) | High | Chromium: CVE-2026-76043 Incorrect calculation in V8 | 8.8 | 0.0041 | | | [CVE-2026-19160](https://patchblox.com/security/data/cve/CVE-2026-19160.md) | High | CVE-2026-19160 Uninitialized Use in Skia | 9.6 | 0.0040 | | | [CVE-2026-76017](https://patchblox.com/security/data/cve/CVE-2026-76017.md) | High | Chromium CVE-2026-76017: Use after free in Chromoting | 8.8 | 0.0038 | | | [CVE-2026-76018](https://patchblox.com/security/data/cve/CVE-2026-76018.md) | High | Chromium CVE-2026-76018: Privilege elevation in Import | 8.8 | 0.0038 | | | [CVE-2026-76041](https://patchblox.com/security/data/cve/CVE-2026-76041.md) | High | Chromium: CVE-2026-76041 Information leak in Skia | 9.6 | 0.0035 | | | [CVE-2026-19144](https://patchblox.com/security/data/cve/CVE-2026-19144.md) | High | CVE-2026-19144 Use after free in HTML | 8.8 | 0.0035 | | | [CVE-2026-19169](https://patchblox.com/security/data/cve/CVE-2026-19169.md) | High | CVE-2026-19169 Insufficient validation of untrusted input in Contextual Tasks | 8.8 | 0.0035 | | | [CVE-2026-19173](https://patchblox.com/security/data/cve/CVE-2026-19173.md) | High | CVE-2026-19173 Out of bounds write in Skia | 9.6 | 0.0034 | | | [CVE-2026-19161](https://patchblox.com/security/data/cve/CVE-2026-19161.md) | High | CVE-2026-19161 Uninitialized Use in Skia | 9.6 | 0.0034 | | | [CVE-2026-76019](https://patchblox.com/security/data/cve/CVE-2026-76019.md) | High | Chromium CVE-2026-76019: Incorrect authorization in Workers | 8.1 | 0.0034 | | | [CVE-2026-19153](https://patchblox.com/security/data/cve/CVE-2026-19153.md) | High | CVE-2026-19153 Insufficient validation of untrusted input in Workers | 8.1 | 0.0033 | | | [CVE-2026-19138](https://patchblox.com/security/data/cve/CVE-2026-19138.md) | High | CVE-2026-19138 Heap buffer overflow in CrashReporting | 8.3 | 0.0033 | | | [CVE-2026-19177](https://patchblox.com/security/data/cve/CVE-2026-19177.md) | High | CVE-2026-19177 Insufficient validation of untrusted input in UI | 8.3 | 0.0032 | | | [CVE-2026-76044](https://patchblox.com/security/data/cve/CVE-2026-76044.md) | High | Chromium: CVE-2026-76044 Race condition in USB | 8.3 | 0.0032 | | | [CVE-2026-19140](https://patchblox.com/security/data/cve/CVE-2026-19140.md) | High | CVE-2026-19140 Use after free in GPU | 8.3 | 0.0030 | | | [CVE-2026-19152](https://patchblox.com/security/data/cve/CVE-2026-19152.md) | High | CVE-2026-19152 Inappropriate implementation in Navigation | 8.3 | 0.0030 | | | [CVE-2026-19155](https://patchblox.com/security/data/cve/CVE-2026-19155.md) | High | CVE-2026-19155 Use after free in Payments | 8.3 | 0.0030 | | | [CVE-2026-19163](https://patchblox.com/security/data/cve/CVE-2026-19163.md) | High | CVE-2026-19163 Use after free in Media | 8.3 | 0.0030 | | | [CVE-2026-19172](https://patchblox.com/security/data/cve/CVE-2026-19172.md) | High | CVE-2026-19172 Use after free in Views | 8.3 | 0.0030 | | | [CVE-2026-19142](https://patchblox.com/security/data/cve/CVE-2026-19142.md) | High | CVE-2026-19142 Use after free in Views | 7.5 | 0.0030 | | | [CVE-2026-19158](https://patchblox.com/security/data/cve/CVE-2026-19158.md) | High | CVE-2026-19158 Use after free in Views | 7.5 | 0.0030 | | | [CVE-2026-19159](https://patchblox.com/security/data/cve/CVE-2026-19159.md) | High | CVE-2026-19159 Use after free in Views | 7.5 | 0.0030 | | | [CVE-2026-19165](https://patchblox.com/security/data/cve/CVE-2026-19165.md) | High | CVE-2026-19165 Use after free in Extensions | 7.5 | 0.0027 | | | [CVE-2026-19558](https://patchblox.com/security/data/cve/CVE-2026-19558.md) | High | Chromium: CVE-2026-19558 Use after free in Extensions | 7.5 | 0.0027 | | | [CVE-2026-19156](https://patchblox.com/security/data/cve/CVE-2026-19156.md) | High | CVE-2026-19156 Heap buffer overflow in Base | 7.5 | 0.0025 | | | [CVE-2026-76037](https://patchblox.com/security/data/cve/CVE-2026-76037.md) | High | Chromium: CVE-2026-76037 Link following in CredentialProvider | 8.4 | 0.0015 | | | [CVE-2026-19139](https://patchblox.com/security/data/cve/CVE-2026-19139.md) | High | CVE-2026-19139 Race in CredentialProvider | 7.4 | 0.0009 | | | [CVE-2026-77490](https://patchblox.com/security/data/cve/CVE-2026-77490.md) | Routine | Microsoft Edge (Chromium-based) Spoofing Vulnerability | 6.1 | 0.0041 | | | [CVE-2026-70339](https://patchblox.com/security/data/cve/CVE-2026-70339.md) | Routine | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 5.4 | 0.0041 | | | [CVE-2026-76042](https://patchblox.com/security/data/cve/CVE-2026-76042.md) | Routine | Chromium: CVE-2026-76042 Use of uninitialized resource in GPU | 3.1 | 0.0025 | | | [CVE-2026-19167](https://patchblox.com/security/data/cve/CVE-2026-19167.md) | Routine | CVE-2026-19167 Integer overflow in GPU | 3.1 | 0.0023 | | | [CVE-2026-76033](https://patchblox.com/security/data/cve/CVE-2026-76033.md) | Routine | Chromium: CVE-2026-76033 Inappropriate implementation in CORS | 4.2 | 0.0022 | | --- Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.