# Microsoft Edge WebView2 Runtime 147.0.3912.72 Microsoft Edge WebView2 Runtime 147.0.3912.72, released April 16, 2026, fixes 28 CVEs in Microsoft Edge WebView2 Runtime. None of them is reported as exploited. Patch Radar priority: Urgent. The latest Microsoft Edge WebView2 Runtime is 157.0.4341.42, which also fixes every one of these CVEs. - Web page: https://patchblox.com/security/fix/windows-app/microsoft.edgewebview2runtime-147.0.3912.72 - Platform: Windows apps - Released: Apr 16, 2026 - Priority: Urgent (Closes CVE-2026-6296, rated Critical) - CVEs: 28, exploited: 0, on CISA KEV: 0 - Superseded by: [Microsoft Edge WebView2 Runtime 157.0.4341.42](https://patchblox.com/security/data/product/windows-app/microsoft-edge-webview2-runtime.md), the latest version, which also fixes every CVE listed here ## Applies to | Product | Release | Fixed in | |---|---|---| | [Microsoft Edge WebView2 Runtime](https://patchblox.com/security/data/product/windows-app/microsoft-edge-webview2-runtime.md) | | 147.0.3912.72 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-6296](https://patchblox.com/security/data/cve/CVE-2026-6296.md) | Urgent | Chromium: CVE-2026-6296 Heap buffer overflow in ANGLE | 9.6 | 0.0056 | | | [CVE-2026-6298](https://patchblox.com/security/data/cve/CVE-2026-6298.md) | Urgent | Chromium: CVE-2026-6298 Heap buffer overflow in Skia | 9.6 | 0.0047 | | | [CVE-2026-6364](https://patchblox.com/security/data/cve/CVE-2026-6364.md) | Urgent | Chromium: CVE-2026-6364 Out of bounds read in Skia | 9.6 | 0.0025 | | | [CVE-2026-6301](https://patchblox.com/security/data/cve/CVE-2026-6301.md) | High | Chromium: CVE-2026-6301 Type Confusion in Turbofan | 8.8 | 0.0037 | | | [CVE-2026-6303](https://patchblox.com/security/data/cve/CVE-2026-6303.md) | High | Chromium: CVE-2026-6303 Use after free in Codecs | 8.8 | 0.0037 | | | [CVE-2026-6307](https://patchblox.com/security/data/cve/CVE-2026-6307.md) | High | Chromium: CVE-2026-6307 Type Confusion in Turbofan | 8.8 | 0.0037 | | | [CVE-2026-6299](https://patchblox.com/security/data/cve/CVE-2026-6299.md) | High | Chromium: CVE-2026-6299 Use after free in Prerender | 8.8 | 0.0034 | | | [CVE-2026-6300](https://patchblox.com/security/data/cve/CVE-2026-6300.md) | High | Chromium: CVE-2026-6300 Use after free in CSS | 8.8 | 0.0034 | | | [CVE-2026-6316](https://patchblox.com/security/data/cve/CVE-2026-6316.md) | High | Chromium: CVE-2026-6316 Use after free in Forms | 8.8 | 0.0034 | | | [CVE-2026-6317](https://patchblox.com/security/data/cve/CVE-2026-6317.md) | High | Chromium: CVE-2026-6317 Use after free in Cast | 8.8 | 0.0034 | | | [CVE-2026-6305](https://patchblox.com/security/data/cve/CVE-2026-6305.md) | High | Chromium: CVE-2026-6305 Heap buffer overflow in PDFium | 8.8 | 0.0034 | | | [CVE-2026-6306](https://patchblox.com/security/data/cve/CVE-2026-6306.md) | High | Chromium: CVE-2026-6306 Heap buffer overflow in PDFium | 8.8 | 0.0034 | | | [CVE-2026-6302](https://patchblox.com/security/data/cve/CVE-2026-6302.md) | High | Chromium: CVE-2026-6302 Use after free in Video | 8.8 | 0.0033 | | | [CVE-2026-6318](https://patchblox.com/security/data/cve/CVE-2026-6318.md) | High | Chromium: CVE-2026-6318 Use after free in Codecs | 8.8 | 0.0033 | | | [CVE-2026-6361](https://patchblox.com/security/data/cve/CVE-2026-6361.md) | High | Chromium: CVE-2026-6361 Heap buffer overflow in PDFium | 8.3 | 0.0031 | | | [CVE-2026-6308](https://patchblox.com/security/data/cve/CVE-2026-6308.md) | High | Chromium: CVE-2026-6308 Out of bounds read in Media | 7.5 | 0.0029 | | | [CVE-2026-6363](https://patchblox.com/security/data/cve/CVE-2026-6363.md) | High | Chromium: CVE-2026-6363 Type Confusion in V8 | 8.8 | 0.0029 | | | [CVE-2026-6311](https://patchblox.com/security/data/cve/CVE-2026-6311.md) | High | Chromium: CVE-2026-6311 Uninitialized Use in Accessibility | 8.3 | 0.0027 | | | [CVE-2026-6314](https://patchblox.com/security/data/cve/CVE-2026-6314.md) | High | Chromium: CVE-2026-6314 Out of bounds write in GPU | 8.3 | 0.0027 | | | [CVE-2026-6359](https://patchblox.com/security/data/cve/CVE-2026-6359.md) | High | Chromium: CVE-2026-6359 Use after free in Video | 8.8 | 0.0027 | | | [CVE-2026-6360](https://patchblox.com/security/data/cve/CVE-2026-6360.md) | High | Chromium: CVE-2026-6360 Use after free in FileSystem | 8.8 | 0.0025 | | | [CVE-2026-6304](https://patchblox.com/security/data/cve/CVE-2026-6304.md) | High | Chromium: CVE-2026-6304 Use after free in Graphite | 8.3 | 0.0025 | | | [CVE-2026-6309](https://patchblox.com/security/data/cve/CVE-2026-6309.md) | High | Chromium: CVE-2026-6309 Use after free in Viz | 8.3 | 0.0025 | | | [CVE-2026-6310](https://patchblox.com/security/data/cve/CVE-2026-6310.md) | High | Chromium: CVE-2026-6310 Use after free in Dawn | 8.3 | 0.0025 | | | [CVE-2026-6297](https://patchblox.com/security/data/cve/CVE-2026-6297.md) | High | Chromium: CVE-2026-6297 Use after free in Proxy | 8.3 | 0.0020 | | | [CVE-2026-6312](https://patchblox.com/security/data/cve/CVE-2026-6312.md) | Routine | Chromium: CVE-2026-6312 Insufficient policy enforcement in Passwords | 3.1 | 0.0022 | | | [CVE-2026-6362](https://patchblox.com/security/data/cve/CVE-2026-6362.md) | Routine | Chromium: CVE-2026-6362 Use after free in Codecs | 4.3 | 0.0022 | | | [CVE-2026-6313](https://patchblox.com/security/data/cve/CVE-2026-6313.md) | Routine | Chromium: CVE-2026-6313 Insufficient policy enforcement in CORS | 3.1 | 0.0022 | | --- Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.