# Microsoft Edge WebView2 Runtime 152.0.4191.62 Microsoft Edge WebView2 Runtime 152.0.4191.62, released September 2, 2026, fixes 22 CVEs in Microsoft Edge WebView2 Runtime. One of them is being exploited (CVE-2026-85046); 1 on CISA KEV. Patch Radar priority: Patch now. The latest Microsoft Edge WebView2 Runtime is 157.0.4341.42, which also fixes every one of these CVEs. - Web page: https://patchblox.com/security/fix/windows-app/microsoft.edgewebview2runtime-152.0.4191.62 - Platform: Windows apps - Released: Sep 2, 2026 - Priority: Patch now (Closes CVE-2026-85046, exploited (CISA KEV)) - CVEs: 22, exploited: 1, on CISA KEV: 1 - Superseded by: [Microsoft Edge WebView2 Runtime 157.0.4341.42](https://patchblox.com/security/data/product/windows-app/microsoft-edge-webview2-runtime.md), the latest version, which also fixes every CVE listed here ## Applies to | Product | Release | Fixed in | |---|---|---| | [Microsoft Edge WebView2 Runtime](https://patchblox.com/security/data/product/windows-app/microsoft-edge-webview2-runtime.md) | | 152.0.4191.62 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-85046](https://patchblox.com/security/data/cve/CVE-2026-85046.md) | Patch now | Chromium: CVE-2026-85046 Type confusion in V8 | 8.8 | 0.0181 | CISA KEV | | [CVE-2026-84324](https://patchblox.com/security/data/cve/CVE-2026-84324.md) | Urgent | Chromium: CVE-2026-84324 Use after free in Proxy | 9.0 | 0.0047 | | | [CVE-2026-84354](https://patchblox.com/security/data/cve/CVE-2026-84354.md) | Urgent | Chromium: CVE-2026-84354 Incorrect authorization in FileSystem | 9.6 | 0.0044 | | | [CVE-2026-84325](https://patchblox.com/security/data/cve/CVE-2026-84325.md) | Urgent | Chromium: CVE-2026-84325 Improper input validation in DataTransfer | 9.8 | 0.0040 | | | [CVE-2026-84347](https://patchblox.com/security/data/cve/CVE-2026-84347.md) | High | Chromium: CVE-2026-84347 Use after free in WebRTC | 8.8 | 0.0052 | | | [CVE-2026-84326](https://patchblox.com/security/data/cve/CVE-2026-84326.md) | High | Chromium: CVE-2026-84326 Uninitialized resource in V8 | 8.8 | 0.0050 | | | [CVE-2026-84351](https://patchblox.com/security/data/cve/CVE-2026-84351.md) | High | Chromium: CVE-2026-84351 Buffer overflow in GPU | 8.3 | 0.0044 | | | [CVE-2026-84349](https://patchblox.com/security/data/cve/CVE-2026-84349.md) | High | Chromium: CVE-2026-84349 Use after free in Browser | 8.3 | 0.0040 | | | [CVE-2026-84335](https://patchblox.com/security/data/cve/CVE-2026-84335.md) | High | Chromium: CVE-2026-84335 Incorrect authorization in TabStrip | 8.3 | 0.0039 | | | [CVE-2026-84350](https://patchblox.com/security/data/cve/CVE-2026-84350.md) | High | Chromium: CVE-2026-84350 Use after free in TabStrip | 8.8 | 0.0038 | | | [CVE-2026-84359](https://patchblox.com/security/data/cve/CVE-2026-84359.md) | High | Chromium: CVE-2026-84359 Information leak in Skia | 9.6 | 0.0020 | | | [CVE-2026-84334](https://patchblox.com/security/data/cve/CVE-2026-84334.md) | High | Chromium: CVE-2026-84334 Incorrect authorization in Chromoting | 8.1 | 0.0012 | | | [CVE-2026-84348](https://patchblox.com/security/data/cve/CVE-2026-84348.md) | Routine | Chromium: CVE-2026-84348 Information leak in MediaCapture | 6.5 | 0.0032 | | | [CVE-2026-84332](https://patchblox.com/security/data/cve/CVE-2026-84332.md) | Routine | Chromium: CVE-2026-84332 Incorrect authorization in SiteSettings | 6.5 | 0.0029 | | | [CVE-2026-84357](https://patchblox.com/security/data/cve/CVE-2026-84357.md) | Routine | Chromium: CVE-2026-84357 Improper input validation in Omnibox | 6.5 | 0.0027 | | | [CVE-2026-84323](https://patchblox.com/security/data/cve/CVE-2026-84323.md) | Routine | Chromium: CVE-2026-84323 Missing authorization in FileSystem | 5.3 | 0.0027 | | | [CVE-2026-84329](https://patchblox.com/security/data/cve/CVE-2026-84329.md) | Routine | Chromium: CVE-2026-84329 Confused deputy in CredentialProvider | 5.3 | 0.0027 | | | [CVE-2026-84356](https://patchblox.com/security/data/cve/CVE-2026-84356.md) | Routine | Chromium: CVE-2026-84356 UI misrepresentation in FullScreen | 4.3 | 0.0025 | | | [CVE-2026-84328](https://patchblox.com/security/data/cve/CVE-2026-84328.md) | Routine | Chromium: CVE-2026-84328 Missing authorization in FileSystem | 3.1 | 0.0024 | | | [CVE-2026-84331](https://patchblox.com/security/data/cve/CVE-2026-84331.md) | Routine | Chromium: CVE-2026-84331 Incorrect authorization in Actor | 3.1 | 0.0024 | | | [CVE-2026-84355](https://patchblox.com/security/data/cve/CVE-2026-84355.md) | Routine | Chromium: CVE-2026-84355 Incorrect authorization in Navigation | 3.1 | 0.0024 | | | [CVE-2026-84358](https://patchblox.com/security/data/cve/CVE-2026-84358.md) | Routine | Chromium: CVE-2026-84358 Improper privilege management in Downloads | 4.2 | 0.0022 | | --- Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.