Microsoft Edge 154.0.4258.37
Microsoft Edge 154.0.4258.37, released September 24, 2026, fixes 32 CVEs in Microsoft Edge. None of them is reported as exploited. Patch Radar priority: Urgent. The latest Microsoft Edge is 157.0.4341.42, which also fixes every one of these CVEs.
Superseded. The latest Microsoft Edge is 157.0.4341.42, which also fixes every CVE on this page. Install that instead.
Priority of the 32 CVEs
Applies to
| Product | Version |
|---|---|
| Microsoft Edge | 154.0.4258.37 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-95356 | Chromium CVE-2026-95356: Use after free in WindowDialog | 9.6 | 0.0042 | None reported |
| High | CVE-2026-85890 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 8.8 | 0.0057 | Exploitation Less Likely |
| High | CVE-2026-85897 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 8.8 | 0.0057 | Exploitation Less Likely |
| High | CVE-2026-96198 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 8.8 | 0.0057 | Exploitation Less Likely |
| High | CVE-2026-96199 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 8.8 | 0.0057 | Exploitation Less Likely |
| High | CVE-2026-95276 | Chromium CVE-2026-95276: Improper input validation in Themes | 8.3 | 0.0040 | None reported |
| High | CVE-2026-95277 | Chromium CVE-2026-95277: Use after free in Views | 9.6 | 0.0035 | None reported |
| High | CVE-2026-95345 | Chromium CVE-2026-95345: Use after free in Actor | 8.8 | 0.0034 | None reported |
| High | CVE-2026-95331 | Chromium CVE-2026-95331: Out of bounds write in ANGLE | 9.6 | 0.0034 | None reported |
| High | CVE-2026-95347 | Chromium CVE-2026-95347: Use after free in Updater | 9.6 | 0.0031 | None reported |
| High | CVE-2026-95319 | Chromium CVE-2026-95319: Use after free in Printing | 8.3 | 0.0030 | None reported |
| High | CVE-2026-95381 | Chromium CVE-2026-95381: Improper input validation in Printing | 8.3 | 0.0030 | None reported |
| High | CVE-2026-95351 | Chromium CVE-2026-95351: Use after free in Views | 8.3 | 0.0028 | None reported |
| High | CVE-2026-95338 | Chromium CVE-2026-95338: Use after free in PDFium | 8.8 | 0.0028 | None reported |
| High | CVE-2026-95301 | Chromium CVE-2026-95301: Missing authorization in Extensions | 8.1 | 0.0026 | None reported |
| High | CVE-2026-95344 | Chromium CVE-2026-95344: Race condition in DevTools | 8.0 | 0.0019 | None reported |
| High | CVE-2026-95376 | Chromium CVE-2026-95376: Externally controlled reference in DevTools | 8.0 | 0.0017 | None reported |
| High | CVE-2026-95315 | Chromium CVE-2026-95315: Use after free in Aura | 7.8 | 0.0015 | None reported |
| Routine | CVE-2026-88090 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 5.4 | 0.0031 | Exploitation Less Likely |
| Routine | CVE-2026-95303 | Chromium CVE-2026-95303: Incomplete cleanup in SmartCard | 6.5 | 0.0028 | None reported |
| Routine | CVE-2026-95346 | Chromium CVE-2026-95346: UI misrepresentation in Chromoting | 4.8 | 0.0028 | None reported |
| Routine | CVE-2026-95297 | Chromium CVE-2026-95297: Missing authorization in Contextual Tasks | 6.5 | 0.0023 | None reported |
| Routine | CVE-2026-95305 | Chromium CVE-2026-95305: UI misrepresentation in Chromoting | 4.8 | 0.0023 | None reported |
| Routine | CVE-2026-95294 | Chromium CVE-2026-95294: UI misrepresentation in Browser | 5.4 | 0.0021 | None reported |
| Routine | CVE-2026-95307 | Chromium CVE-2026-95307: UI misrepresentation in ExtensionsMenu | 5.4 | 0.0021 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.