Microsoft Edge 115.0.1901.200
Microsoft Edge 115.0.1901.200, released August 7, 2023, fixes 24 CVEs in Microsoft Edge. None of them is reported as exploited. Patch Radar priority: High. The latest Microsoft Edge is 156.0.4314.58, which also fixes every one of these CVEs.
Superseded. The latest Microsoft Edge is 156.0.4314.58, which also fixes every CVE on this page. Install that instead.
Priority of the 24 CVEs
Applies to
| Product | Version |
|---|---|
| Microsoft Edge | 115.0.1901.200 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2023-4069 | Chromium: CVE-2023-4069 Type Confusion in V8 | 8.8 | 0.2492 | None reported |
| High | CVE-2023-4068 | Chromium: CVE-2023-4068 Type Confusion in V8 | 8.1 | 0.1614 | None reported |
| High | CVE-2023-4070 | Chromium: CVE-2023-4070 Type Confusion in V8 | 8.1 | 0.0141 | None reported |
| High | CVE-2023-4071 | Chromium: CVE-2023-4071 Heap buffer overflow in Visuals | 8.8 | 0.0125 | None reported |
| High | CVE-2023-4072 | Chromium: CVE-2023-4072 Out of bounds read and write in WebGL | 8.8 | 0.0123 | None reported |
| High | CVE-2023-4075 | Chromium: CVE-2023-4075 Use after free in Cast | 8.8 | 0.0119 | None reported |
| High | CVE-2023-4074 | Chromium: CVE-2023-4074 Use after free in Blink Task Scheduling | 8.8 | 0.0110 | None reported |
| High | CVE-2023-3732 | Chromium: CVE-2023-3732 Out of bounds memory access in Mojo | 8.8 | 0.0104 | None reported |
| High | CVE-2023-4076 | Chromium: CVE-2023-4076 Use after free in WebRTC | 8.8 | 0.0092 | None reported |
| High | CVE-2023-4077 | Chromium: CVE-2023-4077 Insufficient data validation in Extensions | 8.8 | 0.0090 | None reported |
| High | CVE-2023-4078 | Chromium: CVE-2023-4078 Inappropriate implementation in Extensions | 8.8 | 0.0090 | None reported |
| High | CVE-2023-3730 | Chromium: CVE-2023-3730 Use after free in Tab Groups | 8.8 | 0.0072 | None reported |
| High | CVE-2023-3728 | Chromium: CVE-2023-3728 Use after free in WebRTC | 8.8 | 0.0071 | None reported |
| High | CVE-2023-3727 | Chromium: CVE-2023-3727 Use after free in WebRTC | 8.8 | 0.0069 | None reported |
| Routine | CVE-2023-38157 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | 6.5 | 0.0246 | Exploitation Less Likely |
| Routine | CVE-2023-35392 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | 4.7 | 0.0080 | Exploitation Less Likely |
| Routine | CVE-2023-38187 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 6.5 | 0.0077 | Exploitation Less Likely |
| Routine | CVE-2023-38173 | Microsoft Edge for Android Spoofing Vulnerability | 4.3 | 0.0064 | Exploitation Less Likely |
| Routine | CVE-2023-3734 | Chromium: CVE-2023-3734 Inappropriate implementation in Picture In Picture | 4.3 | 0.0061 | None reported |
| Routine | CVE-2023-3733 | Chromium: CVE-2023-3733 Inappropriate implementation in WebApp Installs | 4.3 | 0.0058 | None reported |
| Routine | CVE-2023-3735 | Chromium: CVE-2023-3735 Inappropriate implementation in Web API Permission Prompts | 4.3 | 0.0058 | None reported |
| Routine | CVE-2023-3737 | Chromium: CVE-2023-3737 Inappropriate implementation in Notifications | 4.3 | 0.0056 | None reported |
| Routine | CVE-2023-3740 | Chromium: CVE-2023-3740 Insufficient validation of untrusted input in Themes | 4.3 | 0.0055 | None reported |
| Routine | CVE-2023-3738 | Chromium: CVE-2023-3738 Inappropriate implementation in Autofill | 4.3 | 0.0053 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.