Microsoft Edge 147.0.3912.72
Microsoft Edge 147.0.3912.72, released April 16, 2026, fixes 28 CVEs in Microsoft Edge. None of them is reported as exploited. Patch Radar priority: Urgent. The latest Microsoft Edge is 156.0.4314.58, which also fixes every one of these CVEs.
Superseded. The latest Microsoft Edge is 156.0.4314.58, which also fixes every CVE on this page. Install that instead.
Priority of the 28 CVEs
Applies to
| Product | Version |
|---|---|
| Microsoft Edge | 147.0.3912.72 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-6296 | Chromium: CVE-2026-6296 Heap buffer overflow in ANGLE | 9.6 | 0.0056 | None reported |
| Urgent | CVE-2026-6298 | Chromium: CVE-2026-6298 Heap buffer overflow in Skia | 9.6 | 0.0047 | None reported |
| Urgent | CVE-2026-6364 | Chromium: CVE-2026-6364 Out of bounds read in Skia | 9.6 | 0.0025 | None reported |
| High | CVE-2026-6301 | Chromium: CVE-2026-6301 Type Confusion in Turbofan | 8.8 | 0.0037 | None reported |
| High | CVE-2026-6303 | Chromium: CVE-2026-6303 Use after free in Codecs | 8.8 | 0.0037 | None reported |
| High | CVE-2026-6307 | Chromium: CVE-2026-6307 Type Confusion in Turbofan | 8.8 | 0.0037 | None reported |
| High | CVE-2026-6299 | Chromium: CVE-2026-6299 Use after free in Prerender | 8.8 | 0.0034 | None reported |
| High | CVE-2026-6300 | Chromium: CVE-2026-6300 Use after free in CSS | 8.8 | 0.0034 | None reported |
| High | CVE-2026-6316 | Chromium: CVE-2026-6316 Use after free in Forms | 8.8 | 0.0034 | None reported |
| High | CVE-2026-6317 | Chromium: CVE-2026-6317 Use after free in Cast | 8.8 | 0.0034 | None reported |
| High | CVE-2026-6305 | Chromium: CVE-2026-6305 Heap buffer overflow in PDFium | 8.8 | 0.0034 | None reported |
| High | CVE-2026-6306 | Chromium: CVE-2026-6306 Heap buffer overflow in PDFium | 8.8 | 0.0034 | None reported |
| High | CVE-2026-6302 | Chromium: CVE-2026-6302 Use after free in Video | 8.8 | 0.0033 | None reported |
| High | CVE-2026-6318 | Chromium: CVE-2026-6318 Use after free in Codecs | 8.8 | 0.0033 | None reported |
| High | CVE-2026-6361 | Chromium: CVE-2026-6361 Heap buffer overflow in PDFium | 8.3 | 0.0031 | None reported |
| High | CVE-2026-6308 | Chromium: CVE-2026-6308 Out of bounds read in Media | 7.5 | 0.0029 | None reported |
| High | CVE-2026-6363 | Chromium: CVE-2026-6363 Type Confusion in V8 | 8.8 | 0.0029 | None reported |
| High | CVE-2026-6311 | Chromium: CVE-2026-6311 Uninitialized Use in Accessibility | 8.3 | 0.0027 | None reported |
| High | CVE-2026-6314 | Chromium: CVE-2026-6314 Out of bounds write in GPU | 8.3 | 0.0027 | None reported |
| High | CVE-2026-6359 | Chromium: CVE-2026-6359 Use after free in Video | 8.8 | 0.0027 | None reported |
| High | CVE-2026-6360 | Chromium: CVE-2026-6360 Use after free in FileSystem | 8.8 | 0.0025 | None reported |
| High | CVE-2026-6304 | Chromium: CVE-2026-6304 Use after free in Graphite | 8.3 | 0.0025 | None reported |
| High | CVE-2026-6309 | Chromium: CVE-2026-6309 Use after free in Viz | 8.3 | 0.0025 | None reported |
| High | CVE-2026-6310 | Chromium: CVE-2026-6310 Use after free in Dawn | 8.3 | 0.0025 | None reported |
| High | CVE-2026-6297 | Chromium: CVE-2026-6297 Use after free in Proxy | 8.3 | 0.0020 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.