Microsoft Edge Dev 154.0.4238.0
Microsoft Edge Dev 154.0.4238.0, released August 25, 2026, fixes 243 CVEs in Microsoft Edge Dev. One of them is being exploited (CVE-2026-87491); 1 on CISA KEV. Patch Radar priority: Patch now. The latest Microsoft Edge Dev is 159.0.4378.0, which also fixes every one of these CVEs.
Superseded. The latest Microsoft Edge Dev is 159.0.4378.0, which also fixes every CVE on this page. Install that instead.
Priority of the 243 CVEs
Applies to
| Product | Version |
|---|---|
| Microsoft Edge Dev | 154.0.4238.0 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-87491 | Chromium CVE-2026-87491: Out of bounds write in V8 | 8.8 | 0.0351 | KEVExploited |
| Urgent | CVE-2026-87464 | Chromium CVE-2026-87464: Use after free in WebGL | 9.6 | 0.0058 | None reported |
| Urgent | CVE-2026-87512 | Chromium CVE-2026-87512: Use after free in ANGLE | 9.6 | 0.0055 | None reported |
| Urgent | CVE-2026-87646 | Chromium CVE-2026-87646: Use after free in Web Authentication | 9.6 | 0.0053 | None reported |
| Urgent | CVE-2026-87527 | Chromium CVE-2026-87527: Buffer overflow in WebGL | 9.6 | 0.0051 | None reported |
| Urgent | CVE-2026-87529 | Chromium CVE-2026-87529: Numeric truncation error in Media | 9.6 | 0.0050 | None reported |
| Urgent | CVE-2026-87547 | Chromium CVE-2026-87547: Incorrect reference resolution in FileSystem | 9.6 | 0.0050 | None reported |
| Urgent | CVE-2026-87528 | Chromium CVE-2026-87528: Type confusion in Rust | 9.6 | 0.0048 | None reported |
| Urgent | CVE-2026-87613 | Chromium CVE-2026-87613: Incorrect reference resolution in Extensions | 9.0 | 0.0047 | None reported |
| Urgent | CVE-2026-87448 | Chromium CVE-2026-87448: Use after free in DevTools | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87455 | Chromium CVE-2026-87455: Use after free in Aura | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87474 | Chromium CVE-2026-87474: Use after free in Payments | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87494 | Chromium CVE-2026-87494: Use after free in Browser | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87581 | Chromium CVE-2026-87581: Use after free in Payments | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87634 | Chromium CVE-2026-87634: Use after free in WebPackaging | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87638 | Chromium CVE-2026-87638: Out of bounds write in Media | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87650 | Chromium CVE-2026-87650: Out of bounds read in WebGL | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87492 | Chromium CVE-2026-87492: Incorrect authorization in DevTools | 9.6 | 0.0044 | None reported |
| Urgent | CVE-2026-87504 | Chromium CVE-2026-87504: Use after free in Core | 9.6 | 0.0043 | None reported |
| Urgent | CVE-2026-87526 | Chromium CVE-2026-87526: Use after free in Passwords | 9.6 | 0.0043 | None reported |
| Urgent | CVE-2026-87595 | Chromium CVE-2026-87595: Server-side request forgery in Mobile | 9.8 | 0.0042 | None reported |
| Urgent | CVE-2026-87654 | Chromium CVE-2026-87654: Buffer overflow in ANGLE | 9.6 | 0.0040 | None reported |
| Urgent | CVE-2026-91721 | Chromium CVE-2026-91721: Use after free | 8.8 | 0.0039 | None reported |
| Urgent | CVE-2026-91749 | Chromium CVE-2026-91749: Use after free | 9.6 | 0.0038 | None reported |
| Urgent | CVE-2026-87500 | Chromium CVE-2026-87500: Improper validation of array index in ANGLE | 9.6 | 0.0036 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.