# Microsoft Edge WebView2 Runtime 148.0.3967.96 Microsoft Edge WebView2 Runtime 148.0.3967.96, released May 28, 2026, fixes 105 CVEs in Microsoft Edge WebView2 Runtime. None of them is reported as exploited. Patch Radar priority: Urgent. The latest Microsoft Edge WebView2 Runtime is 157.0.4341.42, which also fixes every one of these CVEs. - Web page: https://patchblox.com/security/fix/windows-app/microsoft.edgewebview2runtime-148.0.3967.96 - Platform: Windows apps - Released: May 28, 2026 - Priority: Urgent (Closes CVE-2026-9893, rated Critical) - CVEs: 105, exploited: 0, on CISA KEV: 0 - Superseded by: [Microsoft Edge WebView2 Runtime 157.0.4341.42](https://patchblox.com/security/data/product/windows-app/microsoft-edge-webview2-runtime.md), the latest version, which also fixes every CVE listed here ## Applies to | Product | Release | Fixed in | |---|---|---| | [Microsoft Edge WebView2 Runtime](https://patchblox.com/security/data/product/windows-app/microsoft-edge-webview2-runtime.md) | | 148.0.3967.96 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-9893](https://patchblox.com/security/data/cve/CVE-2026-9893.md) | Urgent | Chromium: CVE-2026-9893 Use after free in Skia | 9.6 | 0.0044 | | | [CVE-2026-9910](https://patchblox.com/security/data/cve/CVE-2026-9910.md) | Urgent | Chromium: CVE-2026-9910 Out of bounds memory access in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-9878](https://patchblox.com/security/data/cve/CVE-2026-9878.md) | Urgent | Chromium: CVE-2026-9878 Use after free in ANGLE | 9.6 | 0.0033 | | | [CVE-2026-9927](https://patchblox.com/security/data/cve/CVE-2026-9927.md) | Urgent | Chromium: CVE-2026-9927 Use after free in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-9941](https://patchblox.com/security/data/cve/CVE-2026-9941.md) | Urgent | Chromium: CVE-2026-9941 Use after free in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-9879](https://patchblox.com/security/data/cve/CVE-2026-9879.md) | Urgent | Chromium: CVE-2026-9879 Out of bounds write in ANGLE | 9.6 | 0.0031 | | | [CVE-2026-9928](https://patchblox.com/security/data/cve/CVE-2026-9928.md) | Urgent | Chromium: CVE-2026-9928 Out of bounds read in ANGLE | 9.6 | 0.0030 | | | [CVE-2026-9940](https://patchblox.com/security/data/cve/CVE-2026-9940.md) | Urgent | Chromium: CVE-2026-9940 Heap buffer overflow in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-9901](https://patchblox.com/security/data/cve/CVE-2026-9901.md) | Urgent | Chromium: CVE-2026-9901 Use after free in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-9909](https://patchblox.com/security/data/cve/CVE-2026-9909.md) | Urgent | Chromium: CVE-2026-9909 Integer overflow in Skia | 9.6 | 0.0027 | | | [CVE-2026-9983](https://patchblox.com/security/data/cve/CVE-2026-9983.md) | Urgent | Chromium: CVE-2026-9983 Type Confusion in Skia | 9.6 | 0.0027 | | | [CVE-2026-9923](https://patchblox.com/security/data/cve/CVE-2026-9923.md) | Urgent | Chromium: CVE-2026-9923 Use after free in Skia | 9.6 | 0.0027 | | | [CVE-2026-9953](https://patchblox.com/security/data/cve/CVE-2026-9953.md) | Urgent | Chromium: CVE-2026-9953 Out of bounds read in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-9915](https://patchblox.com/security/data/cve/CVE-2026-9915.md) | Urgent | Chromium: CVE-2026-9915 Heap buffer overflow in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-9926](https://patchblox.com/security/data/cve/CVE-2026-9926.md) | Urgent | Chromium: CVE-2026-9926 Heap buffer overflow in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-9965](https://patchblox.com/security/data/cve/CVE-2026-9965.md) | Urgent | Chromium: CVE-2026-9965 Out of bounds write in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-9908](https://patchblox.com/security/data/cve/CVE-2026-9908.md) | Urgent | Chromium: CVE-2026-9908 Out of bounds read in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-9914](https://patchblox.com/security/data/cve/CVE-2026-9914.md) | Urgent | Chromium: CVE-2026-9914 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-9935](https://patchblox.com/security/data/cve/CVE-2026-9935.md) | Urgent | Chromium: CVE-2026-9935 Uninitialized Use in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-9913](https://patchblox.com/security/data/cve/CVE-2026-9913.md) | Urgent | Chromium: CVE-2026-9913 Inappropriate implementation in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-9924](https://patchblox.com/security/data/cve/CVE-2026-9924.md) | Urgent | Chromium: CVE-2026-9924 Heap buffer overflow in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-9891](https://patchblox.com/security/data/cve/CVE-2026-9891.md) | Urgent | Chromium: CVE-2026-9891 Use after free in Extensions | 9.0 | 0.0025 | | | [CVE-2026-9918](https://patchblox.com/security/data/cve/CVE-2026-9918.md) | Urgent | Chromium: CVE-2026-9918 Inappropriate implementation in Tint | 9.6 | 0.0024 | | | [CVE-2026-9967](https://patchblox.com/security/data/cve/CVE-2026-9967.md) | Urgent | Chromium: CVE-2026-9967 Out of bounds write in GPU | 9.6 | 0.0024 | | | [CVE-2026-9877](https://patchblox.com/security/data/cve/CVE-2026-9877.md) | Urgent | Chromium: CVE-2026-9877 Use after free in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-9916](https://patchblox.com/security/data/cve/CVE-2026-9916.md) | Urgent | Chromium: CVE-2026-9916 Out of bounds write in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-9925](https://patchblox.com/security/data/cve/CVE-2026-9925.md) | Urgent | Chromium: CVE-2026-9925 Use after free in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-9874](https://patchblox.com/security/data/cve/CVE-2026-9874.md) | Urgent | Chromium: CVE-2026-9874 Use after free in Dawn | 9.6 | 0.0023 | | | [CVE-2026-10009](https://patchblox.com/security/data/cve/CVE-2026-10009.md) | Urgent | Chromium: CVE-2026-10009 Integer overflow in Skia | 9.6 | 0.0023 | | | [CVE-2026-9882](https://patchblox.com/security/data/cve/CVE-2026-9882.md) | Urgent | Chromium: CVE-2026-9882 Integer overflow in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-9899](https://patchblox.com/security/data/cve/CVE-2026-9899.md) | Urgent | Chromium: CVE-2026-9899 Use after free in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-9900](https://patchblox.com/security/data/cve/CVE-2026-9900.md) | Urgent | Chromium: CVE-2026-9900 Out of bounds write in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-9904](https://patchblox.com/security/data/cve/CVE-2026-9904.md) | Urgent | Chromium: CVE-2026-9904 Use after free in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-9975](https://patchblox.com/security/data/cve/CVE-2026-9975.md) | Urgent | Chromium: CVE-2026-9975 Out of bounds read and write in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-9932](https://patchblox.com/security/data/cve/CVE-2026-9932.md) | Urgent | Chromium: CVE-2026-9932 Use after free in ANGLE | 9.6 | 0.0022 | | | [CVE-2026-9946](https://patchblox.com/security/data/cve/CVE-2026-9946.md) | Urgent | Chromium: CVE-2026-9946 Use after free in ANGLE | 9.6 | 0.0022 | | | [CVE-2026-9942](https://patchblox.com/security/data/cve/CVE-2026-9942.md) | Urgent | Chromium: CVE-2026-9942 Uninitialized Use in ANGLE | 9.6 | 0.0021 | | | [CVE-2026-9944](https://patchblox.com/security/data/cve/CVE-2026-9944.md) | Urgent | Chromium: CVE-2026-9944 Uninitialized Use in ANGLE | 9.6 | 0.0021 | | | [CVE-2026-10018](https://patchblox.com/security/data/cve/CVE-2026-10018.md) | Urgent | Chromium: CVE-2026-10018 Integer overflow in ANGLE | 9.6 | 0.0020 | | | [CVE-2026-9981](https://patchblox.com/security/data/cve/CVE-2026-9981.md) | Urgent | Chromium: CVE-2026-9981 Inappropriate implementation in Skia | 9.6 | 0.0020 | | | [CVE-2026-10019](https://patchblox.com/security/data/cve/CVE-2026-10019.md) | Urgent | Chromium: CVE-2026-10019 Integer overflow in ANGLE | 9.6 | 0.0020 | | | [CVE-2026-9982](https://patchblox.com/security/data/cve/CVE-2026-9982.md) | Urgent | Chromium: CVE-2026-9982 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0020 | | | [CVE-2026-10012](https://patchblox.com/security/data/cve/CVE-2026-10012.md) | Urgent | Chromium: CVE-2026-10012 Use after free in Skia | 9.6 | 0.0018 | | | [CVE-2026-9998](https://patchblox.com/security/data/cve/CVE-2026-9998.md) | Urgent | Chromium: CVE-2026-9998 Integer overflow in Skia | 9.6 | 0.0018 | | | [CVE-2026-10011](https://patchblox.com/security/data/cve/CVE-2026-10011.md) | Urgent | Chromium: CVE-2026-10011 Inappropriate implementation in Skia | 9.6 | 0.0017 | | | [CVE-2026-9939](https://patchblox.com/security/data/cve/CVE-2026-9939.md) | High | Chromium: CVE-2026-9939 Heap buffer overflow in WebCodecs | 8.8 | 0.0041 | | | [CVE-2026-9952](https://patchblox.com/security/data/cve/CVE-2026-9952.md) | High | Chromium: CVE-2026-9952 Use after free in WebAudio | 8.8 | 0.0038 | | | [CVE-2026-9962](https://patchblox.com/security/data/cve/CVE-2026-9962.md) | High | Chromium: CVE-2026-9962 Use after free in WebRTC | 8.8 | 0.0036 | | | [CVE-2026-10013](https://patchblox.com/security/data/cve/CVE-2026-10013.md) | High | Chromium: CVE-2026-10013 Use after free in WebCodecs | 8.8 | 0.0032 | | | [CVE-2026-9938](https://patchblox.com/security/data/cve/CVE-2026-9938.md) | High | Chromium: CVE-2026-9938 Inappropriate implementation in V8 | 8.8 | 0.0032 | | | [CVE-2026-9973](https://patchblox.com/security/data/cve/CVE-2026-9973.md) | High | Chromium: CVE-2026-9973 Out of bounds write in V8 | 8.8 | 0.0031 | | | [CVE-2026-9945](https://patchblox.com/security/data/cve/CVE-2026-9945.md) | High | Chromium: CVE-2026-9945 Use after free in Media | 8.8 | 0.0030 | | | [CVE-2026-9873](https://patchblox.com/security/data/cve/CVE-2026-9873.md) | High | Chromium: CVE-2026-9873 Use after free in Network | 8.8 | 0.0030 | | | [CVE-2026-9976](https://patchblox.com/security/data/cve/CVE-2026-9976.md) | High | Chromium: CVE-2026-9976 Inappropriate implementation in USB | 8.8 | 0.0030 | | | [CVE-2026-9995](https://patchblox.com/security/data/cve/CVE-2026-9995.md) | High | Chromium: CVE-2026-9995 Use after free in WebXR | 8.8 | 0.0030 | | | [CVE-2026-9883](https://patchblox.com/security/data/cve/CVE-2026-9883.md) | High | Chromium: CVE-2026-9883 Use after free in Base | 8.8 | 0.0029 | | | [CVE-2026-9896](https://patchblox.com/security/data/cve/CVE-2026-9896.md) | High | Chromium: CVE-2026-9896 Out of bounds write in V8 | 8.8 | 0.0029 | | | [CVE-2026-9897](https://patchblox.com/security/data/cve/CVE-2026-9897.md) | High | Chromium: CVE-2026-9897 Use after free in DOM | 8.8 | 0.0029 | | | [CVE-2026-9957](https://patchblox.com/security/data/cve/CVE-2026-9957.md) | High | Chromium: CVE-2026-9957 Use after free in PDF | 8.8 | 0.0028 | | | [CVE-2026-9968](https://patchblox.com/security/data/cve/CVE-2026-9968.md) | High | Chromium: CVE-2026-9968 Integer overflow in V8 | 8.8 | 0.0028 | | | [CVE-2026-9934](https://patchblox.com/security/data/cve/CVE-2026-9934.md) | High | Chromium: CVE-2026-9934 Use after free in Aura | 7.5 | 0.0026 | | | [CVE-2026-10007](https://patchblox.com/security/data/cve/CVE-2026-10007.md) | High | Chromium: CVE-2026-10007 Use after free in SVG | 8.8 | 0.0025 | | | [CVE-2026-10015](https://patchblox.com/security/data/cve/CVE-2026-10015.md) | High | Chromium: CVE-2026-10015 Integer overflow in WTF | 8.8 | 0.0025 | | | [CVE-2026-10016](https://patchblox.com/security/data/cve/CVE-2026-10016.md) | High | Chromium: CVE-2026-10016 Use after free in DOM | 8.8 | 0.0025 | | | [CVE-2026-9961](https://patchblox.com/security/data/cve/CVE-2026-9961.md) | High | Chromium: CVE-2026-9961 Use after free in SurfaceCapture | 8.8 | 0.0024 | | | [CVE-2026-9960](https://patchblox.com/security/data/cve/CVE-2026-9960.md) | High | Chromium: CVE-2026-9960 Integer overflow in PDFium | 7.5 | 0.0024 | | | [CVE-2026-10021](https://patchblox.com/security/data/cve/CVE-2026-10021.md) | High | Chromium: CVE-2026-10021 Insufficient validation of untrusted input in USB | 8.8 | 0.0023 | | | [CVE-2026-9978](https://patchblox.com/security/data/cve/CVE-2026-9978.md) | High | Chromium: CVE-2026-9978 Use after free in Glic | 8.8 | 0.0023 | | | [CVE-2026-9984](https://patchblox.com/security/data/cve/CVE-2026-9984.md) | High | Chromium: CVE-2026-9984 Use after free in UI | 8.8 | 0.0023 | | | [CVE-2026-9992](https://patchblox.com/security/data/cve/CVE-2026-9992.md) | High | Chromium: CVE-2026-9992 Use after free in Network | 8.8 | 0.0023 | | | [CVE-2026-10006](https://patchblox.com/security/data/cve/CVE-2026-10006.md) | High | Chromium: CVE-2026-10006 Race in WebAudio | 7.5 | 0.0023 | | | [CVE-2026-9958](https://patchblox.com/security/data/cve/CVE-2026-9958.md) | High | Chromium: CVE-2026-9958 Use after free in PDFium | 8.8 | 0.0022 | | | [CVE-2026-9931](https://patchblox.com/security/data/cve/CVE-2026-9931.md) | High | Chromium: CVE-2026-9931 Use after free in GPU | 8.3 | 0.0022 | | | [CVE-2026-9937](https://patchblox.com/security/data/cve/CVE-2026-9937.md) | High | Chromium: CVE-2026-9937 Use after free in UI | 8.3 | 0.0022 | | | [CVE-2026-9949](https://patchblox.com/security/data/cve/CVE-2026-9949.md) | High | Chromium: CVE-2026-9949 Use after free in Core | 8.3 | 0.0022 | | | [CVE-2026-9951](https://patchblox.com/security/data/cve/CVE-2026-9951.md) | High | Chromium: CVE-2026-9951 Use after free in UI | 8.3 | 0.0022 | | | [CVE-2026-9933](https://patchblox.com/security/data/cve/CVE-2026-9933.md) | High | Chromium: CVE-2026-9933 Use after free in Input | 7.5 | 0.0022 | | | [CVE-2026-10003](https://patchblox.com/security/data/cve/CVE-2026-10003.md) | High | Chromium: CVE-2026-10003 Use after free in Views | 7.5 | 0.0022 | | | [CVE-2026-9887](https://patchblox.com/security/data/cve/CVE-2026-9887.md) | High | Chromium: CVE-2026-9887 Use after free in Proxy | 8.8 | 0.0022 | | | [CVE-2026-9890](https://patchblox.com/security/data/cve/CVE-2026-9890.md) | High | Chromium: CVE-2026-9890 Use after free in XR | 8.3 | 0.0021 | | | [CVE-2026-9894](https://patchblox.com/security/data/cve/CVE-2026-9894.md) | High | Chromium: CVE-2026-9894 Use after free in GPU | 8.3 | 0.0021 | | | [CVE-2026-9895](https://patchblox.com/security/data/cve/CVE-2026-9895.md) | High | Chromium: CVE-2026-9895 Out of bounds read in GPU | 8.3 | 0.0021 | | | [CVE-2026-9902](https://patchblox.com/security/data/cve/CVE-2026-9902.md) | High | Chromium: CVE-2026-9902 Use after free in Accessibility | 8.3 | 0.0021 | | | [CVE-2026-9905](https://patchblox.com/security/data/cve/CVE-2026-9905.md) | High | Chromium: CVE-2026-9905 Use after free in Accessibility | 8.3 | 0.0021 | | | [CVE-2026-9906](https://patchblox.com/security/data/cve/CVE-2026-9906.md) | High | Chromium: CVE-2026-9906 Out of bounds write in GPU | 8.3 | 0.0021 | | | [CVE-2026-9966](https://patchblox.com/security/data/cve/CVE-2026-9966.md) | High | Chromium: CVE-2026-9966 Integer overflow in XML | 8.3 | 0.0021 | | | [CVE-2026-9970](https://patchblox.com/security/data/cve/CVE-2026-9970.md) | High | Chromium: CVE-2026-9970 Use after free in WebGL | 8.3 | 0.0021 | | | [CVE-2026-9954](https://patchblox.com/security/data/cve/CVE-2026-9954.md) | High | Chromium: CVE-2026-9954 Use after free in TabStrip | 7.5 | 0.0021 | | | [CVE-2026-10000](https://patchblox.com/security/data/cve/CVE-2026-10000.md) | High | Chromium: CVE-2026-10000 Use after free in Passwords | 8.3 | 0.0019 | | | [CVE-2026-10017](https://patchblox.com/security/data/cve/CVE-2026-10017.md) | High | Chromium: CVE-2026-10017 Out of bounds read in Headless | 8.3 | 0.0019 | | | [CVE-2026-9994](https://patchblox.com/security/data/cve/CVE-2026-9994.md) | High | Chromium: CVE-2026-9994 Use after free in Core | 8.3 | 0.0018 | | | [CVE-2026-10002](https://patchblox.com/security/data/cve/CVE-2026-10002.md) | High | Chromium: CVE-2026-10002 Use after free in PDFium | 8.8 | 0.0018 | | | [CVE-2026-9997](https://patchblox.com/security/data/cve/CVE-2026-9997.md) | High | Chromium: CVE-2026-9997 Use after free in Input | 8.3 | 0.0018 | | | [CVE-2026-10001](https://patchblox.com/security/data/cve/CVE-2026-10001.md) | High | Chromium: CVE-2026-10001 Use after free in PerformanceManager | 8.3 | 0.0017 | | | [CVE-2026-9993](https://patchblox.com/security/data/cve/CVE-2026-9993.md) | High | Chromium: CVE-2026-9993 Use after free in Views | 8.3 | 0.0016 | | | [CVE-2026-10022](https://patchblox.com/security/data/cve/CVE-2026-10022.md) | High | Chromium: CVE-2026-10022 Type Confusion in V8 | 7.5 | 0.0015 | | | [CVE-2026-9907](https://patchblox.com/security/data/cve/CVE-2026-9907.md) | Routine | Chromium: CVE-2026-9907 Out of bounds read in Dawn | 4.3 | 0.0021 | | | [CVE-2026-10004](https://patchblox.com/security/data/cve/CVE-2026-10004.md) | Routine | Chromium: CVE-2026-10004 Insufficient validation of untrusted input in Passwords | 6.5 | 0.0016 | | | [CVE-2026-9903](https://patchblox.com/security/data/cve/CVE-2026-9903.md) | Routine | Chromium: CVE-2026-9903 Insufficient validation of untrusted input in Site Isolation | 5.0 | 0.0016 | | | [CVE-2026-9986](https://patchblox.com/security/data/cve/CVE-2026-9986.md) | Routine | Chromium: CVE-2026-9986 Insufficient validation of untrusted input in OptimizationGuide | 4.2 | 0.0015 | | | [CVE-2026-9991](https://patchblox.com/security/data/cve/CVE-2026-9991.md) | Routine | Chromium: CVE-2026-9991 Inappropriate implementation in Media | 3.1 | 0.0014 | | | [CVE-2026-9959](https://patchblox.com/security/data/cve/CVE-2026-9959.md) | Routine | Chromium: CVE-2026-9959 Race in WebRTC | 3.1 | 0.0014 | | | [CVE-2026-9979](https://patchblox.com/security/data/cve/CVE-2026-9979.md) | Routine | Chromium: CVE-2026-9979 Insufficient validation of untrusted input in Input | 5.0 | 0.0013 | | | [CVE-2026-9980](https://patchblox.com/security/data/cve/CVE-2026-9980.md) | Routine | Chromium: CVE-2026-9980 Insufficient validation of untrusted input in Printing | 5.0 | 0.0012 | | | [CVE-2026-9989](https://patchblox.com/security/data/cve/CVE-2026-9989.md) | Routine | Chromium: CVE-2026-9989 Inappropriate implementation in Media | 6.3 | 0.0011 | | --- Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.