Microsoft Edge WebView2 Runtime 150.0.4078.83
Microsoft Edge WebView2 Runtime 150.0.4078.83, released July 17, 2026, fixes 16 CVEs in Microsoft Edge WebView2 Runtime. None of them is reported as exploited. Patch Radar priority: Urgent. The latest Microsoft Edge WebView2 Runtime is 157.0.4341.42, which also fixes every one of these CVEs.
Superseded. The latest Microsoft Edge WebView2 Runtime is 157.0.4341.42, which also fixes every CVE on this page. Install that instead.
Priority of the 16 CVEs
Applies to
| Product | Version |
|---|---|
| Microsoft Edge WebView2 Runtime | 150.0.4078.83 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-15773 | Chromium: CVE-2026-15773 Use after free in Core | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-15901 | Chromium: CVE-2026-15901 Use after free in Network | 9.6 | 0.0035 | None reported |
| High | CVE-2026-15776 | Chromium: CVE-2026-15776 Type Confusion in V8 | 8.8 | 0.0050 | None reported |
| High | CVE-2026-15767 | Chromium: CVE-2026-15767 Heap buffer overflow in libyuv | 8.8 | 0.0042 | None reported |
| High | CVE-2026-15902 | Chromium: CVE-2026-15902 Use after free in Cast | 8.8 | 0.0041 | None reported |
| High | CVE-2026-15903 | Chromium: CVE-2026-15903 Out of bounds read and write in V8 | 8.8 | 0.0041 | None reported |
| High | CVE-2026-15766 | Chromium: CVE-2026-15766 Uninitialized Use in Skia | 9.6 | 0.0040 | None reported |
| High | CVE-2026-15765 | Chromium: CVE-2026-15765 Use after free in Ozone | 7.5 | 0.0030 | None reported |
| High | CVE-2026-15774 | Chromium: CVE-2026-15774 Use after free in Skia | 9.6 | 0.0029 | None reported |
| High | CVE-2026-15905 | Chromium: CVE-2026-15905 Use after free in Aura | 7.8 | 0.0014 | None reported |
| Routine | CVE-2026-57980 | Microsoft Edge (Chromium-based) Tampering Vulnerability | 5.4 | 0.0039 | Exploitation Unlikely |
| Routine | CVE-2026-15770 | Chromium: CVE-2026-15770 Uninitialized Use in V8 | 6.5 | 0.0035 | None reported |
| Routine | CVE-2026-15771 | Chromium: CVE-2026-15771 Insufficient validation of untrusted input in Media | 5.3 | 0.0030 | None reported |
| Routine | CVE-2026-15778 | Chromium: CVE-2026-15778 Insufficient validation of untrusted input in Navigation | 6.5 | 0.0030 | None reported |
| Routine | CVE-2026-15768 | Chromium: CVE-2026-15768 Insufficient policy enforcement in HTML-in-Canvas | 6.5 | 0.0024 | None reported |
| Routine | CVE-2026-15775 | Chromium: CVE-2026-15775 Insufficient policy enforcement in V8 | 6.5 | 0.0024 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.