Microsoft Edge 152.0.4191.62
Microsoft Edge 152.0.4191.62, released September 2, 2026, fixes 19 CVEs in Microsoft Edge. One of them is being exploited (CVE-2026-85046); 1 on CISA KEV. Patch Radar priority: Patch now. The latest Microsoft Edge is 157.0.4341.42, which also fixes every one of these CVEs.
Superseded. The latest Microsoft Edge is 157.0.4341.42, which also fixes every CVE on this page. Install that instead.
Priority of the 19 CVEs
Applies to
| Product | Version |
|---|---|
| Microsoft Edge | 152.0.4191.62 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-85046 | Chromium: CVE-2026-85046 Type confusion in V8 | 8.8 | 0.0181 | KEVExploited |
| Urgent | CVE-2026-84324 | Chromium: CVE-2026-84324 Use after free in Proxy | 9.0 | 0.0047 | None reported |
| Urgent | CVE-2026-84354 | Chromium: CVE-2026-84354 Incorrect authorization in FileSystem | 9.6 | 0.0044 | None reported |
| Urgent | CVE-2026-84325 | Chromium: CVE-2026-84325 Improper input validation in DataTransfer | 9.8 | 0.0040 | None reported |
| High | CVE-2026-84347 | Chromium: CVE-2026-84347 Use after free in WebRTC | 8.8 | 0.0052 | None reported |
| High | CVE-2026-84326 | Chromium: CVE-2026-84326 Uninitialized resource in V8 | 8.8 | 0.0050 | None reported |
| High | CVE-2026-84349 | Chromium: CVE-2026-84349 Use after free in Browser | 8.3 | 0.0040 | None reported |
| High | CVE-2026-84335 | Chromium: CVE-2026-84335 Incorrect authorization in TabStrip | 8.3 | 0.0039 | None reported |
| High | CVE-2026-84350 | Chromium: CVE-2026-84350 Use after free in TabStrip | 8.8 | 0.0038 | None reported |
| High | CVE-2026-84359 | Chromium: CVE-2026-84359 Information leak in Skia | 9.6 | 0.0020 | None reported |
| Routine | CVE-2026-84348 | Chromium: CVE-2026-84348 Information leak in MediaCapture | 6.5 | 0.0032 | None reported |
| Routine | CVE-2026-84332 | Chromium: CVE-2026-84332 Incorrect authorization in SiteSettings | 6.5 | 0.0029 | None reported |
| Routine | CVE-2026-84357 | Chromium: CVE-2026-84357 Improper input validation in Omnibox | 6.5 | 0.0027 | None reported |
| Routine | CVE-2026-84323 | Chromium: CVE-2026-84323 Missing authorization in FileSystem | 5.3 | 0.0027 | None reported |
| Routine | CVE-2026-84356 | Chromium: CVE-2026-84356 UI misrepresentation in FullScreen | 4.3 | 0.0025 | None reported |
| Routine | CVE-2026-84328 | Chromium: CVE-2026-84328 Missing authorization in FileSystem | 3.1 | 0.0024 | None reported |
| Routine | CVE-2026-84331 | Chromium: CVE-2026-84331 Incorrect authorization in Actor | 3.1 | 0.0024 | None reported |
| Routine | CVE-2026-84355 | Chromium: CVE-2026-84355 Incorrect authorization in Navigation | 3.1 | 0.0024 | None reported |
| Routine | CVE-2026-84358 | Chromium: CVE-2026-84358 Improper privilege management in Downloads | 4.2 | 0.0022 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.