Microsoft Edge 149.0.4022.52
Microsoft Edge 149.0.4022.52, released June 4, 2026, fixes 329 CVEs in Microsoft Edge. None of them is reported as exploited. Patch Radar priority: Urgent. The latest Microsoft Edge is 156.0.4314.58, which also fixes every one of these CVEs.
Superseded. The latest Microsoft Edge is 156.0.4314.58, which also fixes every CVE on this page. Install that instead.
Priority of the 329 CVEs
Applies to
| Product | Version |
|---|---|
| Microsoft Edge | 149.0.4022.52 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-10886 | Chromium: CVE-2026-10886 Use after free in FileSystem | 9.6 | 0.0586 | None reported |
| Urgent | CVE-2026-10881 | Chromium: CVE-2026-10881 Out of bounds read and write in ANGLE | 9.6 | 0.0063 | None reported |
| Urgent | CVE-2026-10941 | Chromium: CVE-2026-10941 Out of bounds memory access in Skia | 9.6 | 0.0044 | None reported |
| Urgent | CVE-2026-10913 | Chromium: CVE-2026-10913 Use after free in ANGLE | 9.6 | 0.0039 | None reported |
| Urgent | CVE-2026-10914 | Chromium: CVE-2026-10914 Use after free in ANGLE | 9.6 | 0.0039 | None reported |
| Urgent | CVE-2026-10955 | Chromium: CVE-2026-10955 Type Confusion in ANGLE | 9.6 | 0.0038 | None reported |
| Urgent | CVE-2026-11024 | Chromium: CVE-2026-11024 Stack buffer overflow in Skia | 9.6 | 0.0037 | None reported |
| Urgent | CVE-2026-10977 | Chromium: CVE-2026-10977 Uninitialized Use in Skia | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-10994 | Chromium: CVE-2026-10994 Uninitialized Use in ANGLE | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-10993 | Chromium: CVE-2026-10993 Heap buffer overflow in Skia | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-10907 | Chromium: CVE-2026-10907 Out of bounds write in ANGLE | 9.6 | 0.0034 | None reported |
| Urgent | CVE-2026-10974 | Chromium: CVE-2026-10974 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0034 | None reported |
| Urgent | CVE-2026-11088 | Chromium: CVE-2026-11088 Integer overflow in ANGLE | 9.6 | 0.0034 | None reported |
| Urgent | CVE-2026-10931 | Chromium: CVE-2026-10931 Use after free in FileSystem | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-10983 | Chromium: CVE-2026-10983 Insufficient validation of untrusted input in Dawn | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-11009 | Chromium: CVE-2026-11009 Use after free in USB | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-11021 | Chromium: CVE-2026-11021 Insufficient validation of untrusted input in GPU | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-10971 | Chromium: CVE-2026-10971 Insufficient validation of untrusted input in Printing | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-10979 | Chromium: CVE-2026-10979 Out of bounds read in ANGLE | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-10985 | Chromium: CVE-2026-10985 Out of bounds read in Skia | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-9969 | Chromium: CVE-2026-9969 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0031 | None reported |
| Urgent | CVE-2026-10990 | Chromium: CVE-2026-10990 Use after free in Glic | 9.6 | 0.0030 | None reported |
| Urgent | CVE-2026-11002 | Chromium: CVE-2026-11002 Use after free in Autofill | 9.6 | 0.0030 | None reported |
| Urgent | CVE-2026-11047 | Chromium: CVE-2026-11047 Insufficient validation of untrusted input in Base | 9.6 | 0.0030 | None reported |
| Urgent | CVE-2026-10966 | Chromium: CVE-2026-10966 Insufficient validation of untrusted input in Codecs | 9.6 | 0.0030 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.