# Microsoft Edge WebView2 Runtime 125.0.2535.67 Microsoft Edge WebView2 Runtime 125.0.2535.67, released May 24, 2024, fixes 44 CVEs in Microsoft Edge WebView2 Runtime. 4 of them are being exploited (CVE-2024-4947); 4 on CISA KEV. Patch Radar priority: Patch now. The latest Microsoft Edge WebView2 Runtime is 157.0.4341.42, which also fixes every one of these CVEs. - Web page: https://patchblox.com/security/fix/windows-app/microsoft.edgewebview2runtime-125.0.2535.67 - Platform: Windows apps - Released: May 24, 2024 - Priority: Patch now (Closes CVE-2024-4947, exploited (CISA KEV)) - CVEs: 44, exploited: 4, on CISA KEV: 4 - Superseded by: [Microsoft Edge WebView2 Runtime 157.0.4341.42](https://patchblox.com/security/data/product/windows-app/microsoft-edge-webview2-runtime.md), the latest version, which also fixes every CVE listed here ## Applies to | Product | Release | Fixed in | |---|---|---| | [Microsoft Edge WebView2 Runtime](https://patchblox.com/security/data/product/windows-app/microsoft-edge-webview2-runtime.md) | | 125.0.2535.67 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-4947](https://patchblox.com/security/data/cve/CVE-2024-4947.md) | Patch now | Chromium: CVE-2024-4947 Type Confusion in V8 | 9.6 | 0.1524 | CISA KEV | | [CVE-2024-4761](https://patchblox.com/security/data/cve/CVE-2024-4761.md) | Patch now | Chromium: CVE-2024-4761 Out of bounds write in V8 | 8.8 | 0.1101 | CISA KEV | | [CVE-2024-4671](https://patchblox.com/security/data/cve/CVE-2024-4671.md) | Patch now | Chromium: CVE-2024-4671 Use after free in Visuals | 9.6 | 0.0835 | CISA KEV | | [CVE-2024-5274](https://patchblox.com/security/data/cve/CVE-2024-5274.md) | Patch now | Chromium: CVE-2024-5274 Type Confusion in V8 | 9.6 | 0.0773 | CISA KEV | | [CVE-2024-3157](https://patchblox.com/security/data/cve/CVE-2024-3157.md) | Urgent | Chromium: CVE-2024-3157 Out of bounds write in Compositing | 9.6 | 0.0085 | | | [CVE-2024-3833](https://patchblox.com/security/data/cve/CVE-2024-3833.md) | High | Chromium: CVE-2024-3833 Object corruption in WebAssembly | 8.8 | 0.1756 | | | [CVE-2024-3156](https://patchblox.com/security/data/cve/CVE-2024-3156.md) | High | Chromium: CVE-2024-3156 Inappropriate implementation in V8 | 8.8 | 0.1295 | | | [CVE-2024-4058](https://patchblox.com/security/data/cve/CVE-2024-4058.md) | High | Chromium: CVE-2024-4058 Type Confusion in ANGLE | 8.8 | 0.0883 | | | [CVE-2024-3832](https://patchblox.com/security/data/cve/CVE-2024-3832.md) | High | Chromium: CVE-2024-3832 Object corruption in V8 | 8.8 | 0.0169 | | | [CVE-2024-3159](https://patchblox.com/security/data/cve/CVE-2024-3159.md) | High | Chromium: CVE-2024-3159 Out of bounds memory access in V8 | 8.8 | 0.0161 | | | [CVE-2024-30056](https://patchblox.com/security/data/cve/CVE-2024-30056.md) | High | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | 7.1 | 0.0155 | | | [CVE-2024-4558](https://patchblox.com/security/data/cve/CVE-2024-4558.md) | High | Chromium: CVE-2024-4558 Use after free in ANGLE | 9.6 | 0.0153 | | | [CVE-2024-4331](https://patchblox.com/security/data/cve/CVE-2024-4331.md) | High | Chromium: CVE-2024-4331 Use after free in Picture In Picture | 8.8 | 0.0122 | | | [CVE-2024-3834](https://patchblox.com/security/data/cve/CVE-2024-3834.md) | High | Chromium: CVE-2024-3834 Use after free in Downloads | 8.8 | 0.0120 | | | [CVE-2024-3837](https://patchblox.com/security/data/cve/CVE-2024-3837.md) | High | Chromium: CVE-2024-3837 Use after free in QUIC | 8.8 | 0.0119 | | | [CVE-2024-4368](https://patchblox.com/security/data/cve/CVE-2024-4368.md) | High | Chromium: CVE-2024-4368 Use after free in Dawn | 8.8 | 0.0108 | | | [CVE-2024-3840](https://patchblox.com/security/data/cve/CVE-2024-3840.md) | High | Chromium: CVE-2024-3840 Insufficient policy enforcement in Site Isolation | 7.5 | 0.0085 | | | [CVE-2024-5157](https://patchblox.com/security/data/cve/CVE-2024-5157.md) | High | Chromium: CVE-2024-5157 Use after free in Scheduling | 8.8 | 0.0079 | | | [CVE-2024-3158](https://patchblox.com/security/data/cve/CVE-2024-3158.md) | High | Chromium: CVE-2024-3158 Use after free in Bookmarks | 8.8 | 0.0078 | | | [CVE-2024-5159](https://patchblox.com/security/data/cve/CVE-2024-5159.md) | High | Chromium: CVE-2024-5159 Heap buffer overflow in ANGLE | 8.8 | 0.0064 | | | [CVE-2024-5160](https://patchblox.com/security/data/cve/CVE-2024-5160.md) | High | Chromium: CVE-2024-5160 Heap buffer overflow in Dawn | 8.8 | 0.0061 | | | [CVE-2024-5158](https://patchblox.com/security/data/cve/CVE-2024-5158.md) | High | Chromium: CVE-2024-5158 Type Confusion in V8 | 8.1 | 0.0061 | | | [CVE-2024-29987](https://patchblox.com/security/data/cve/CVE-2024-29987.md) | Routine | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | 6.5 | 0.0120 | | | [CVE-2024-4559](https://patchblox.com/security/data/cve/CVE-2024-4559.md) | Routine | Chromium: CVE-2024-4559 Heap buffer overflow in WebAudio | 6.5 | 0.0119 | | | [CVE-2024-3516](https://patchblox.com/security/data/cve/CVE-2024-3516.md) | Routine | Chromium: CVE-2024-3516 Heap buffer overflow in ANGLE | 6.5 | 0.0101 | | | [CVE-2024-4060](https://patchblox.com/security/data/cve/CVE-2024-4060.md) | Routine | Chromium: CVE-2024-4060 Use after free in Dawn | 6.5 | 0.0100 | | | [CVE-2024-3914](https://patchblox.com/security/data/cve/CVE-2024-3914.md) | Routine | Chromium: CVE-2024-3914 Use after free in V8 | 6.5 | 0.0098 | | | [CVE-2024-4948](https://patchblox.com/security/data/cve/CVE-2024-4948.md) | Routine | Chromium: CVE-2024-4948 Use after free in Dawn | 6.5 | 0.0096 | | | [CVE-2024-4949](https://patchblox.com/security/data/cve/CVE-2024-4949.md) | Routine | Chromium: CVE-2024-4949 Use after free in V8 | 6.5 | 0.0095 | | | [CVE-2024-3846](https://patchblox.com/security/data/cve/CVE-2024-3846.md) | Routine | Chromium: CVE-2024-3846 Inappropriate implementation in Prompts | 4.3 | 0.0092 | | | [CVE-2024-4950](https://patchblox.com/security/data/cve/CVE-2024-4950.md) | Routine | Chromium: CVE-2024-4950 Inappropriate implementation in Downloads | 6.5 | 0.0091 | | | [CVE-2024-4059](https://patchblox.com/security/data/cve/CVE-2024-4059.md) | Routine | Chromium: CVE-2024-4059 Out of bounds read in V8 API | 6.5 | 0.0090 | | | [CVE-2024-3847](https://patchblox.com/security/data/cve/CVE-2024-3847.md) | Routine | Chromium: CVE-2024-3847 Insufficient policy enforcement in WebUI | 6.1 | 0.0089 | | | [CVE-2024-3845](https://patchblox.com/security/data/cve/CVE-2024-3845.md) | Routine | Chromium: CVE-2024-3845 Inappropriate implementation in Network | 4.3 | 0.0085 | | | [CVE-2024-3515](https://patchblox.com/security/data/cve/CVE-2024-3515.md) | Routine | Chromium: CVE-2024-3515 Use after free in Dawn | 6.5 | 0.0078 | | | [CVE-2024-3839](https://patchblox.com/security/data/cve/CVE-2024-3839.md) | Routine | Chromium: CVE-2024-3839 Out of bounds read in Fonts | 6.5 | 0.0075 | | | [CVE-2024-3841](https://patchblox.com/security/data/cve/CVE-2024-3841.md) | Routine | Chromium: CVE-2024-3841 Insufficient data validation in Browser Switcher | 6.1 | 0.0072 | | | [CVE-2024-3844](https://patchblox.com/security/data/cve/CVE-2024-3844.md) | Routine | Chromium: CVE-2024-3844 Inappropriate implementation in Extensions | 4.3 | 0.0071 | | | [CVE-2024-29981](https://patchblox.com/security/data/cve/CVE-2024-29981.md) | Routine | Microsoft Edge (Chromium-based) Spoofing Vulnerability | 4.3 | 0.0070 | | | [CVE-2024-29049](https://patchblox.com/security/data/cve/CVE-2024-29049.md) | Routine | Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability | 4.7 | 0.0066 | | | [CVE-2024-29991](https://patchblox.com/security/data/cve/CVE-2024-29991.md) | Routine | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | 5.0 | 0.0065 | | | [CVE-2024-3843](https://patchblox.com/security/data/cve/CVE-2024-3843.md) | Routine | Chromium: CVE-2024-3843 Insufficient data validation in Downloads | 4.3 | 0.0065 | | | [CVE-2024-30055](https://patchblox.com/security/data/cve/CVE-2024-30055.md) | Routine | Microsoft Edge (Chromium-based) Spoofing Vulnerability | 5.4 | 0.0063 | | | [CVE-2024-3838](https://patchblox.com/security/data/cve/CVE-2024-3838.md) | Routine | Chromium: CVE-2024-3838 Inappropriate implementation in Autofill | 5.5 | 0.0034 | | --- Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.