Microsoft Edge WebView2 Runtime 150.0.4078.65
Microsoft Edge WebView2 Runtime 150.0.4078.65, released July 9, 2026, fixes 28 CVEs in Microsoft Edge WebView2 Runtime. None of them is reported as exploited. Patch Radar priority: Urgent. The latest Microsoft Edge WebView2 Runtime is 157.0.4341.42, which also fixes every one of these CVEs.
Superseded. The latest Microsoft Edge WebView2 Runtime is 157.0.4341.42, which also fixes every CVE on this page. Install that instead.
Priority of the 28 CVEs
Applies to
| Product | Version |
|---|---|
| Microsoft Edge WebView2 Runtime | 150.0.4078.65 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-15109 | Chromium: CVE-2026-15109 Uninitialized Use in ANGLE | 9.6 | 0.0029 | None reported |
| High | CVE-2026-15121 | Chromium: CVE-2026-15121 Use after free in WebRTC | 8.8 | 0.0052 | None reported |
| High | CVE-2026-58525 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | 8.2 | 0.0051 | Exploitation Unlikely |
| High | CVE-2026-15132 | Chromium: CVE-2026-15132 Uninitialized Use in V8 | 8.8 | 0.0045 | None reported |
| High | CVE-2026-15107 | Chromium: CVE-2026-15107 Use after free in IndexedDB | 8.8 | 0.0041 | None reported |
| High | CVE-2026-15116 | Chromium: CVE-2026-15116 Use after free in Actor | 8.8 | 0.0041 | None reported |
| High | CVE-2026-15118 | Chromium: CVE-2026-15118 Use after free in Input | 8.8 | 0.0041 | None reported |
| High | CVE-2026-15126 | Chromium: CVE-2026-15126 Use after free in Forms | 8.8 | 0.0041 | None reported |
| High | CVE-2026-15133 | Chromium: CVE-2026-15133 Use after free in InterestGroups | 8.8 | 0.0041 | None reported |
| High | CVE-2026-15125 | Chromium: CVE-2026-15125 Inappropriate implementation in Forms | 8.8 | 0.0040 | None reported |
| High | CVE-2026-15112 | Chromium: CVE-2026-15112 Use after free in Ozone | 8.8 | 0.0035 | None reported |
| High | CVE-2026-15123 | Chromium: CVE-2026-15123 Insufficient data validation in DOM | 8.8 | 0.0035 | None reported |
| High | CVE-2026-15129 | Chromium: CVE-2026-15129 Use after free in Views | 8.8 | 0.0035 | None reported |
| High | CVE-2026-15122 | Chromium: CVE-2026-15122 Insufficient validation of untrusted input in Codecs | 8.3 | 0.0032 | None reported |
| High | CVE-2026-15114 | Chromium: CVE-2026-15114 Out of bounds read and write in Codecs | 8.8 | 0.0032 | None reported |
| High | CVE-2026-15120 | Chromium: CVE-2026-15120 Use after free in Core | 8.3 | 0.0030 | None reported |
| High | CVE-2026-15111 | Chromium: CVE-2026-15111 Use after free in Views | 7.5 | 0.0030 | None reported |
| High | CVE-2026-15117 | Chromium: CVE-2026-15117 Use after free in Payments | 7.5 | 0.0030 | None reported |
| High | CVE-2026-15110 | Chromium: CVE-2026-15110 Use after free in Extensions | 8.8 | 0.0026 | None reported |
| High | CVE-2026-15119 | Chromium: CVE-2026-15119 Inappropriate implementation in GetUserMedia | 8.3 | 0.0024 | None reported |
| Routine | CVE-2026-70331 | Microsoft Edge for iOS Spoofing Vulnerability | 5.4 | 0.0041 | Exploitation Less Likely |
| Routine | CVE-2026-15124 | Chromium: CVE-2026-15124 Insufficient policy enforcement in Passwords | 4.3 | 0.0027 | None reported |
| Routine | CVE-2026-15130 | Chromium: CVE-2026-15130 Insufficient policy enforcement in Navigation | 4.3 | 0.0027 | None reported |
| Routine | CVE-2026-15131 | Chromium: CVE-2026-15131 Insufficient data validation in Navigation | 4.3 | 0.0027 | None reported |
| Routine | CVE-2026-15127 | Chromium: CVE-2026-15127 Inappropriate implementation in WebGL | 6.1 | 0.0022 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.