Windows apps · Application version · August 21, 2023

Microsoft Edge 116.0.1938.54

Microsoft Edge 116.0.1938.54, released August 21, 2023, fixes 18 CVEs in Microsoft Edge. None of them is reported as exploited. Patch Radar priority: High. The latest Microsoft Edge is 156.0.4314.58, which also fixes every one of these CVEs.

High

Superseded. The latest Microsoft Edge is 156.0.4314.58, which also fixes every CVE on this page. Install that instead.

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

8.8

Base score, 0 to 10

Highest EPSS

0.4712

98th percentile

Priority of the 18 CVEs

Patch now 0
                                Urgent 0
                                High 13
                                Routine 5

Applies to

Product	Version
Microsoft Edge	116.0.1938.54

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2023-4357	Chromium: CVE-2023-4357 Insufficient validation of untrusted input in XML	8.8	0.4712	None reported
High	CVE-2023-4355	Chromium: CVE-2023-4355 Out of bounds memory access in V8	8.8	0.2770	None reported
High	CVE-2023-4362	Chromium: CVE-2023-4362 Heap buffer overflow in Mojom IDL	8.8	0.1909	None reported
High	CVE-2023-36787	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability	8.8	0.0198	Exploitation Less Likely
High	CVE-2023-4352	Chromium: CVE-2023-4352 Type Confusion in V8	8.8	0.0184	None reported
High	CVE-2023-4354	Chromium: CVE-2023-4354 Heap buffer overflow in Skia	8.8	0.0165	None reported
High	CVE-2023-4353	Chromium: CVE-2023-4353 Heap buffer overflow in ANGLE	8.8	0.0096	None reported
High	CVE-2023-4349	Chromium: CVE-2023-4349 Use after free in Device Trust Connectors	8.8	0.0086	None reported
High	CVE-2023-4351	Chromium: CVE-2023-4351 Use after free in Network	8.8	0.0086	None reported
High	CVE-2023-4356	Chromium: CVE-2023-4356 Use after free in Audio	8.8	0.0086	None reported
High	CVE-2023-4358	Chromium: CVE-2023-4358 Use after free in DNS	8.8	0.0086	None reported
High	CVE-2023-4368	Chromium: CVE-2023-4368 Insufficient policy enforcement in Extensions API	8.8	0.0069	None reported
High	CVE-2023-4366	Chromium: CVE-2023-4366 Use after free in Extensions	8.8	0.0067	None reported
Routine	CVE-2023-38158	Microsoft Edge (Chromium-based) Information Disclosure Vulnerability	3.1	0.0135	Exploitation Less Likely
Routine	CVE-2023-4360	Chromium: CVE-2023-4360 Inappropriate implementation in Color	4.3	0.0068	None reported
Routine	CVE-2023-4364	Chromium: CVE-2023-4364 Inappropriate implementation in Permission Prompts	4.3	0.0068	None reported
Routine	CVE-2023-4365	Chromium: CVE-2023-4365 Inappropriate implementation in Fullscreen	4.3	0.0068	None reported
Routine	CVE-2023-4367	Chromium: CVE-2023-4367 Insufficient policy enforcement in Extensions API	6.5	0.0064	None reported

Other Microsoft Edge versions with security fixes

Microsoft Edge 156.0.4314.58
Microsoft Edge
Microsoft Edge 156.0.4314.56
Microsoft Edge
Microsoft Edge 156.0.4314.50
Microsoft Edge
Microsoft Edge 156.0.4314.42
Microsoft Edge
Microsoft Edge 155.0.4283.62
Microsoft Edge
Microsoft Edge 155.0.4283.60
Microsoft Edge

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/windows-app/microsoft.edge-116.0.1938.54">Microsoft Edge 116.0.1938.54 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Is it current everywhere?

Patchblox finds every install below the fixed version, including per-user copies, and updates them from a signed catalog package.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.