Microsoft Edge 148.0.3967.54
Microsoft Edge 148.0.3967.54, released May 7, 2026, fixes 109 CVEs in Microsoft Edge. None of them is reported as exploited. Patch Radar priority: Urgent. The latest Microsoft Edge is 156.0.4314.58, which also fixes every one of these CVEs.
Superseded. The latest Microsoft Edge is 156.0.4314.58, which also fixes every CVE on this page. Install that instead.
Priority of the 109 CVEs
Applies to
| Product | Version |
|---|---|
| Microsoft Edge | 148.0.3967.54 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-7900 | Chromium: CVE-2026-7900 Heap buffer overflow in ANGLE | 9.6 | 0.0024 | None reported |
| Urgent | CVE-2026-7903 | Chromium: CVE-2026-7903 Integer overflow in ANGLE | 9.6 | 0.0022 | None reported |
| Urgent | CVE-2026-7908 | Chromium: CVE-2026-7908 Use after free in Fullscreen | 9.6 | 0.0022 | None reported |
| Urgent | CVE-2026-7910 | Chromium: CVE-2026-7910 Use after free in Views | 9.6 | 0.0022 | None reported |
| Urgent | CVE-2026-7920 | Chromium: CVE-2026-7920 Use after free in Skia | 9.6 | 0.0022 | None reported |
| Urgent | CVE-2026-7923 | Chromium: CVE-2026-7923 Out of bounds write in Skia | 9.6 | 0.0022 | None reported |
| Urgent | CVE-2026-7942 | Chromium: CVE-2026-7942 Integer overflow in ANGLE | 9.6 | 0.0020 | None reported |
| Urgent | CVE-2026-7949 | Chromium: CVE-2026-7949 Out of bounds read in Skia | 9.6 | 0.0019 | None reported |
| Urgent | CVE-2026-7943 | Chromium: CVE-2026-7943 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0017 | None reported |
| High | CVE-2026-7951 | Chromium: CVE-2026-7951 Out of bounds write in WebRTC | 8.8 | 0.0038 | None reported |
| High | CVE-2026-7902 | Chromium: CVE-2026-7902 Out of bounds memory access in V8 | 8.8 | 0.0034 | None reported |
| High | CVE-2026-7928 | Chromium: CVE-2026-7928 Use after free in WebRTC | 8.8 | 0.0034 | None reported |
| High | CVE-2026-7980 | Chromium: CVE-2026-7980 Use after free in WebAudio | 8.8 | 0.0034 | None reported |
| High | CVE-2026-7987 | Chromium: CVE-2026-7987 Use after free in WebRTC | 8.8 | 0.0034 | None reported |
| High | CVE-2026-7988 | Chromium: CVE-2026-7988 Type Confusion in WebRTC | 8.8 | 0.0031 | None reported |
| High | CVE-2026-8016 | Chromium: CVE-2026-8016 Use after free in WebRTC | 8.8 | 0.0031 | None reported |
| High | CVE-2026-7899 | Chromium: CVE-2026-7899 Out of bounds read and write in V8 | 8.8 | 0.0030 | None reported |
| High | CVE-2026-7927 | Chromium: CVE-2026-7927 Type Confusion in Runtime | 8.8 | 0.0029 | None reported |
| High | CVE-2026-7896 | Chromium: CVE-2026-7896 Integer overflow in Blink | 8.8 | 0.0028 | None reported |
| High | CVE-2026-7906 | Chromium: CVE-2026-7906 Use after free in SVG | 8.8 | 0.0027 | None reported |
| High | CVE-2026-7907 | Chromium: CVE-2026-7907 Use after free in DOM | 8.8 | 0.0027 | None reported |
| High | CVE-2026-7921 | Chromium: CVE-2026-7921 Use after free in Passwords | 8.8 | 0.0027 | None reported |
| High | CVE-2026-7926 | Chromium: CVE-2026-7926 Use after free in PresentationAPI | 8.8 | 0.0027 | None reported |
| High | CVE-2026-7938 | Chromium: CVE-2026-7938 Use after free in CSS | 8.8 | 0.0027 | None reported |
| High | CVE-2026-7974 | Chromium: CVE-2026-7974 Use after free in Blink | 8.8 | 0.0027 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.