Windows apps · Application version · June 21, 2024

Microsoft Edge Dev 127.0.2651.8

Microsoft Edge Dev 127.0.2651.8, released June 21, 2024, fixes 873 CVEs in Microsoft Edge Dev. 29 of them are being exploited (CVE-2023-4863); 29 on CISA KEV. Patch Radar priority: Patch now. The latest Microsoft Edge Dev is 159.0.4378.0, which also fixes every one of these CVEs.

Patch now29 on CISA KEVKnown ransomware use1 publicly disclosed

Superseded. The latest Microsoft Edge Dev is 159.0.4378.0, which also fixes every CVE on this page. Install that instead.

CVEs closed
873
27 rated Critical
Exploited
29
CVE-2023-4863
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.9998
99th percentile

Priority of the 873 CVEs

Patch now 29 Urgent 19 High 541 Routine 284

Applies to

ProductVersion
Microsoft Edge Dev127.0.2651.8

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Patch now CVE-2023-4863 Chromium: CVE-2023-4863 Heap buffer overflow in WebP9.6 0.9998 KEVDisclosedExploited
Patch now CVE-2022-2294 Chromium: CVE-2022-2294 Heap buffer overflow in WebRTC8.8 0.7083 KEVRansomwareExploited
Patch now CVE-2021-30632 Chromium: CVE-2021-30632 Out of bounds write in V88.8 0.6319 KEVExploited
Patch now CVE-2023-4762 Chromium: CVE-2023-4762 Type Confusion in V88.8 0.4138 KEVExploited
Patch now CVE-2023-2033 Chromium: CVE-2023-2033 Type Confusion in V88.8 0.4065 KEVExploited
Patch now CVE-2021-38003 Chromium: CVE-2021-38003 Inappropriate implementation in V88.8 0.3857 KEVExploited
Patch now CVE-2023-3079 Chromium: CVE-2023-3079 Type Confusion in V88.8 0.3786 KEVExploited
Patch now CVE-2021-37975 Chromium: CVE-2021-37975 Use after free in V88.8 0.3489 KEVExploited
Patch now CVE-2021-30633 Chromium: CVE-2021-30633 Use after free in Indexed DB API9.6 0.3318 KEVExploited
Patch now CVE-2022-4135 Chromium: CVE-2022-4135 Heap buffer overflow in GPU9.6 0.3186 KEVExploited
Patch now CVE-2022-3038 Chromium: CVE-2022-3038 Use after free in Network Service8.8 0.2493 KEVExploited
Patch now CVE-2022-1096 Chromium: CVE-2022-1096 Type Confusion in V88.8 0.2473 KEVExploited
Patch now CVE-2022-4262 Chromium: CVE-2022-4262 Type Confusion in V88.8 0.2351 KEVExploited
Patch now CVE-2022-0609 Chromium: CVE-2022-0609 Use after free in Animation8.8 0.2244 KEVExploited
Patch now CVE-2021-37976 Chromium: CVE-2021-37976 Information leak in core6.5 0.1990 KEVExploited
Patch now CVE-2023-6345 Chromium: CVE-2023-6345 Integer overflow in Skia9.6 0.1647 KEVExploited
Patch now CVE-2024-4947 Chromium: CVE-2024-4947 Type Confusion in V89.6 0.1524 KEVExploited
Patch now CVE-2022-1364 Chromium: CVE-2022-1364: Type Confusion in V88.8 0.1392 KEVExploited
Patch now CVE-2021-37973 Chromium: CVE-2021-37973 Use after free in Portals9.6 0.1174 KEVExploited
Patch now CVE-2024-4761 Chromium: CVE-2024-4761 Out of bounds write in V88.8 0.1101 KEVExploited
Patch now CVE-2024-4671 Chromium: CVE-2024-4671 Use after free in Visuals9.6 0.0835 KEVExploited
Patch now CVE-2022-3723 Chromium: CVE-2022-3723 Type Confusion in V88.8 0.0792 KEVExploited
Patch now CVE-2021-4102 Chromium: CVE-2021-4102 Use after free in V88.8 0.0784 KEVExploited
Patch now CVE-2024-5274 Chromium: CVE-2024-5274 Type Confusion in V89.6 0.0773 KEVExploited
Patch now CVE-2023-7024 Chromium: CVE-2023-7024 Heap buffer overflow in WebRTC8.8 0.0667 KEVExploited
Showing 1 to 25 of 873 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.