Microsoft Edge 121.0.2277.112
Microsoft Edge 121.0.2277.112, released February 5, 2024, fixes 34 CVEs in Microsoft Edge. 2 of them are being exploited (CVE-2023-7024); 2 on CISA KEV. Patch Radar priority: Patch now. The latest Microsoft Edge is 156.0.4314.58, which also fixes every one of these CVEs.
Superseded. The latest Microsoft Edge is 156.0.4314.58, which also fixes every CVE on this page. Install that instead.
Priority of the 34 CVEs
Applies to
| Product | Version |
|---|---|
| Microsoft Edge | 121.0.2277.112 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2023-7024 | Chromium: CVE-2023-7024 Heap buffer overflow in WebRTC | 8.8 | 0.0667 | KEVExploited |
| Patch now | CVE-2024-0519 | Chromium: CVE-2024-0519 Out of bounds memory access in V8 | 8.8 | 0.0380 | KEVExploited |
| Urgent | CVE-2024-0808 | Chromium: CVE-2024-0808 Integer underflow in WebUI | 9.8 | 0.0055 | None reported |
| High | CVE-2024-0517 | Chromium: CVE-2024-0517 Out of bounds write in V8 | 8.8 | 0.2170 | None reported |
| High | CVE-2024-0223 | Chromium: CVE-2024-0223 Heap buffer overflow in ANGLE | 8.8 | 0.1020 | None reported |
| High | CVE-2024-21326 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 9.6 | 0.0123 | Exploitation Less Likely |
| High | CVE-2024-21399 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 8.3 | 0.0123 | Exploitation Less Likely |
| High | CVE-2024-0222 | Chromium: CVE-2024-0222 Use after free in ANGLE | 8.8 | 0.0107 | None reported |
| High | CVE-2024-0224 | Chromium: CVE-2024-0224 Use after free in WebAudio | 8.8 | 0.0102 | None reported |
| High | CVE-2024-0225 | Chromium: CVE-2024-0225 Use after free in WebGPU | 8.8 | 0.0101 | None reported |
| High | CVE-2024-21385 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 8.3 | 0.0096 | Exploitation Less Likely |
| High | CVE-2024-1059 | Chromium: CVE-2024-1059 Use after free in WebRTC | 8.8 | 0.0095 | None reported |
| High | CVE-2024-0518 | Chromium: CVE-2024-0518 Type Confusion in V8 | 8.8 | 0.0094 | None reported |
| High | CVE-2024-1077 | Chromium: CVE-2024-1077 Use after free in Network | 8.8 | 0.0094 | None reported |
| High | CVE-2024-1060 | Chromium: CVE-2024-1060 Use after free in Canvas | 8.8 | 0.0089 | None reported |
| High | CVE-2024-0804 | Chromium: CVE-2024-0804 Insufficient policy enforcement in iOS Security UI | 7.5 | 0.0049 | None reported |
| High | CVE-2024-0812 | Chromium: CVE-2024-0812 Inappropriate implementation in Accessibility | 8.8 | 0.0048 | None reported |
| High | CVE-2024-0807 | Chromium: CVE-2024-0807 Use after free in WebAudio | 8.8 | 0.0048 | None reported |
| High | CVE-2024-0806 | Chromium: CVE-2024-0806 Use after free in Passwords | 8.8 | 0.0045 | None reported |
| High | CVE-2024-0813 | Chromium: CVE-2024-0813 Use after free in Reading Mode | 8.8 | 0.0038 | None reported |
| Routine | CVE-2024-21388 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 6.5 | 0.3563 | Exploitation Less Likely |
| Routine | CVE-2024-21387 | Microsoft Edge for Android Spoofing Vulnerability | 5.3 | 0.0072 | Exploitation Less Likely |
| Routine | CVE-2024-20721 | Adobe Systems Incorporated: CVE-2024-20721 Improper Input Validation Denial of Service Vulnerability | 5.5 | 0.0072 | Exploitation Less Likely |
| Routine | CVE-2024-20709 | Adobe Systems Incorporated: CVE-2024-20709 Javascript Implementation PDF Vulnerability | 5.5 | 0.0060 | Exploitation Less Likely |
| Routine | CVE-2024-0811 | Chromium: CVE-2024-0811 Inappropriate implementation in Extensions API | 4.3 | 0.0058 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.