Microsoft Edge 148.0.3967.83
Microsoft Edge 148.0.3967.83, released May 21, 2026, fixes 71 CVEs in Microsoft Edge. None of them is reported as exploited. Patch Radar priority: Urgent. The latest Microsoft Edge is 157.0.4341.42, which also fixes every one of these CVEs.
Superseded. The latest Microsoft Edge is 157.0.4341.42, which also fixes every CVE on this page. Install that instead.
Priority of the 71 CVEs
Applies to
| Product | Version |
|---|---|
| Microsoft Edge | 148.0.3967.83 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-45495 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 9.8 | 0.0099 | More likely |
| Urgent | CVE-2026-45494 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | 6.1 | 0.0030 | More likely |
| Urgent | CVE-2026-45492 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | 5.4 | 0.0030 | More likely |
| Urgent | CVE-2026-8511 | Chromium: CVE-2026-8511 Use after free in UI | 9.6 | 0.0023 | None reported |
| Urgent | CVE-2026-8525 | Chromium: CVE-2026-8525 Heap buffer overflow in ANGLE | 9.6 | 0.0023 | None reported |
| Urgent | CVE-2026-8580 | Chromium: CVE-2026-8580 Use after free in Mojo | 9.6 | 0.0021 | None reported |
| Urgent | CVE-2026-8579 | Chromium: CVE-2026-8579 Insufficient validation of untrusted input in Skia | 9.6 | 0.0014 | None reported |
| High | CVE-2026-9111 | Chromium: CVE-2026-9111 Use after free in WebRTC | 8.8 | 0.0080 | None reported |
| High | CVE-2026-41107 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | 7.4 | 0.0065 | Exploitation Less Likely |
| High | CVE-2026-9119 | Chromium: CVE-2026-9119 Heap buffer overflow in WebRTC | 8.8 | 0.0054 | None reported |
| High | CVE-2026-9120 | Chromium: CVE-2026-9120 Use after free in WebRTC | 8.8 | 0.0050 | None reported |
| High | CVE-2026-8517 | Chromium: CVE-2026-8517 Object lifecycle issue in WebShare | 8.8 | 0.0050 | None reported |
| High | CVE-2026-8509 | Chromium: CVE-2026-8509 Heap buffer overflow in WebML | 8.8 | 0.0040 | None reported |
| High | CVE-2026-9112 | Chromium: CVE-2026-9112 Use after free in GPU | 8.8 | 0.0040 | None reported |
| High | CVE-2026-9118 | Chromium: CVE-2026-9118 Use after free in XR | 8.8 | 0.0040 | None reported |
| High | CVE-2026-9126 | Chromium: CVE-2026-9124 Insufficient validation of untrusted input in Input | 8.8 | 0.0040 | None reported |
| High | CVE-2026-8524 | Chromium: CVE-2026-8524 Out of bounds write in WebAudio | 8.8 | 0.0038 | None reported |
| High | CVE-2026-8526 | Chromium: CVE-2026-8526 Out of bounds write in WebRTC | 8.8 | 0.0038 | None reported |
| High | CVE-2026-9114 | Chromium: CVE-2026-9114 Use after free in QUIC | 8.8 | 0.0037 | None reported |
| High | CVE-2026-9121 | Chromium: CVE-2026-9126 Use after free in DOM | 8.8 | 0.0033 | None reported |
| High | CVE-2026-8558 | Chromium: CVE-2026-8558 Out of bounds write in Fonts | 8.8 | 0.0031 | None reported |
| High | CVE-2026-8540 | Chromium: CVE-2026-8540 Type Confusion in V8 | 8.8 | 0.0031 | None reported |
| High | CVE-2026-8529 | Chromium: CVE-2026-8529 Heap buffer overflow in Codecs | 8.8 | 0.0030 | None reported |
| High | CVE-2026-8527 | Chromium: CVE-2026-8527 Insufficient validation of untrusted input in Downloads | 8.8 | 0.0029 | None reported |
| High | CVE-2026-8518 | Chromium: CVE-2026-8518 Use after free in Blink | 8.8 | 0.0028 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.