Windows apps · Application version · May 14, 2025

Microsoft Edge Dev 138.0.3309.1

Microsoft Edge Dev 138.0.3309.1, released May 14, 2025, fixes 14 CVEs in Microsoft Edge Dev. One of them is being exploited (CVE-2025-5419); 1 on CISA KEV. Patch Radar priority: Patch now. The latest Microsoft Edge Dev is 159.0.4378.0, which also fixes every one of these CVEs.

Patch now1 on CISA KEV

Superseded. The latest Microsoft Edge Dev is 159.0.4378.0, which also fixes every CVE on this page. Install that instead.

CVEs closed

None rated Critical

Exploited

CVE-2025-5419

Highest CVSS

8.8

Base score, 0 to 10

Highest EPSS

0.1278

96th percentile

Priority of the 14 CVEs

Patch now 1
                                Urgent 0
                                High 8
                                Routine 5

Applies to

Product	Version
Microsoft Edge Dev	138.0.3309.1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Patch now	CVE-2025-5419	Chromium: CVE-2025-5419 Out of bounds read and write in V8	8.8	0.0755	KEVExploited
High	CVE-2025-5959	Chromium: CVE-2025-5959 Type Confusion in V8	8.8	0.1278	None reported
High	CVE-2025-6191	Chromium: CVE-2025-6191 Integer overflow in V8	8.8	0.1159	None reported
High	CVE-2025-5063	Chromium: CVE-2025-5063 Use after free in Compositing	8.8	0.0367	None reported
High	CVE-2025-5068	Chromium: CVE-2025-5068 Use after free in Blink	8.8	0.0347	None reported
High	CVE-2025-5280	Chromium: CVE-2025-5280 Out of bounds write in V8	8.8	0.0291	None reported
High	CVE-2025-5283	Chromium: CVE-2025-5283 Use after free in libvpx	8.8	0.0064	None reported
High	CVE-2025-6192	Chromium: CVE-2025-6192 Use after free in Profiler	8.8	0.0045	None reported
High	CVE-2025-5958	Chromium: CVE-2025-5958 Use after free in Media	8.8	0.0039	None reported
Routine	CVE-2025-5065	Chromium: CVE-2025-5065 Inappropriate implementation in FileSystemAccess API	6.5	0.0041	None reported
Routine	CVE-2025-5066	Chromium: CVE-2025-5066 Inappropriate implementation in Messages	6.5	0.0041	None reported
Routine	CVE-2025-5067	Chromium: CVE-2025-5067 Inappropriate implementation in Tab Strip	5.4	0.0036	None reported
Routine	CVE-2025-5064	Chromium: CVE-2025-5064 Inappropriate implementation in Background Fetch API	5.4	0.0032	None reported
Routine	CVE-2025-5281	Chromium: CVE-2025-5281 Inappropriate implementation in BFCache	5.4	0.0024	None reported

Other Microsoft Edge Dev versions with security fixes

Microsoft Edge Dev 157.0.4322.0
Microsoft Edge Dev
Microsoft Edge Dev 156.0.4285.0
Microsoft Edge Dev
Microsoft Edge Dev 155.0.4273.0
Microsoft Edge Dev
Microsoft Edge Dev 154.0.4238.0
Microsoft Edge Dev
Microsoft Edge Dev 153.0.4224.0
Microsoft Edge Dev
Microsoft Edge Dev 152.0.4167.0
Microsoft Edge Dev

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/windows-app/microsoft.edge.dev-138.0.3309.1">Microsoft Edge Dev 138.0.3309.1 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Is it current everywhere?

Patchblox finds every install below the fixed version, including per-user copies, and updates them from a signed catalog package.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.