Microsoft Edge 154.0.4258.48
Microsoft Edge 154.0.4258.48, released September 29, 2026, fixes 59 CVEs in Microsoft Edge. None of them is reported as exploited. Patch Radar priority: Urgent. The latest Microsoft Edge is 156.0.4314.58, which also fixes every one of these CVEs.
Superseded. The latest Microsoft Edge is 156.0.4314.58, which also fixes every CVE on this page. Install that instead.
Priority of the 59 CVEs
Applies to
| Product | Version |
|---|---|
| Microsoft Edge | 154.0.4258.48 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-96202 | Windows Raw Image Extension Remote Code Execution Vulnerability | 8.8 | 0.0093 | Exploitation Less Likely |
| Urgent | CVE-2026-95339 | Chromium CVE-2026-95339: Use after free in ServiceWorker | 9.6 | 0.0047 | None reported |
| Urgent | CVE-2026-95310 | Chromium CVE-2026-95310: Use after free in AdFilter | 9.6 | 0.0045 | None reported |
| Urgent | CVE-2026-95313 | Chromium CVE-2026-95313: Use after free in Fullscreen | 9.6 | 0.0045 | None reported |
| High | CVE-2026-83831 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 8.8 | 0.0075 | Exploitation Less Likely |
| High | CVE-2026-85898 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 8.8 | 0.0075 | Exploitation Less Likely |
| High | CVE-2026-95318 | Chromium CVE-2026-95318: Buffer overflow in Video | 9.6 | 0.0039 | None reported |
| High | CVE-2026-95343 | Chromium CVE-2026-95343: Use after free in WebAudio | 8.8 | 0.0037 | None reported |
| High | CVE-2026-95282 | Chromium CVE-2026-95282: Use after free in Platform | 8.8 | 0.0035 | None reported |
| High | CVE-2026-95311 | Chromium CVE-2026-95311: Free of non-heap memory in Fonts | 9.6 | 0.0035 | None reported |
| High | CVE-2026-95325 | Chromium CVE-2026-95325: Use after free in ANGLE | 9.6 | 0.0035 | None reported |
| High | CVE-2026-95299 | Chromium CVE-2026-95299: Use after free in GPU | 9.6 | 0.0034 | None reported |
| High | CVE-2026-95286 | Chromium CVE-2026-95286: Type confusion in Bindings | 8.8 | 0.0034 | None reported |
| High | CVE-2026-95304 | Chromium CVE-2026-95304: Out of bounds write in V8 | 8.8 | 0.0034 | None reported |
| High | CVE-2026-95306 | Chromium CVE-2026-95306: Type confusion in V8 | 8.8 | 0.0033 | None reported |
| High | CVE-2026-95365 | Chromium CVE-2026-95365: Type confusion in IndexedDB | 8.8 | 0.0032 | None reported |
| High | CVE-2026-95334 | Chromium CVE-2026-95334: Incorrect reference resolution in WebProtect | 8.3 | 0.0032 | None reported |
| High | CVE-2026-95326 | Chromium CVE-2026-95326: Incomplete cleanup in Bluetooth | 8.4 | 0.0032 | None reported |
| High | CVE-2026-95333 | Chromium CVE-2026-95333: Use after free in Metrics | 8.1 | 0.0031 | None reported |
| High | CVE-2026-95274 | Chromium CVE-2026-95274: Improper output encoding in DevTools | 8.3 | 0.0030 | None reported |
| High | CVE-2026-95353 | Chromium CVE-2026-95353: Use after free in Bindings | 8.8 | 0.0030 | None reported |
| High | CVE-2026-95335 | Chromium CVE-2026-95335: Use after free in HID | 8.3 | 0.0030 | None reported |
| High | CVE-2026-95341 | Chromium CVE-2026-95341: Improper input validation in Desktop | 8.3 | 0.0029 | None reported |
| High | CVE-2026-95348 | Chromium CVE-2026-95348: Use after free in Bluetooth | 8.3 | 0.0028 | None reported |
| High | CVE-2026-95373 | Chromium CVE-2026-95373: Use after free in DevTools | 8.8 | 0.0027 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.