# Microsoft Edge WebView2 Runtime 156.0.4314.56 Microsoft Edge WebView2 Runtime 156.0.4314.56, released October 29, 2026, fixes 47 CVEs in Microsoft Edge WebView2 Runtime. None of them is reported as exploited. Patch Radar priority: Urgent. The latest Microsoft Edge WebView2 Runtime is 157.0.4341.42, which also fixes every one of these CVEs. - Web page: https://patchblox.com/security/fix/windows-app/microsoft.edgewebview2runtime-156.0.4314.56 - Platform: Windows apps - Released: Oct 29, 2026 - Priority: Urgent (Closes CVE-2026-118306, rated Critical) - CVEs: 47, exploited: 0, on CISA KEV: 0 - Superseded by: [Microsoft Edge WebView2 Runtime 157.0.4341.42](https://patchblox.com/security/data/product/windows-app/microsoft-edge-webview2-runtime.md), the latest version, which also fixes every CVE listed here ## Applies to | Product | Release | Fixed in | |---|---|---| | [Microsoft Edge WebView2 Runtime](https://patchblox.com/security/data/product/windows-app/microsoft-edge-webview2-runtime.md) | | 156.0.4314.56 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-118306](https://patchblox.com/security/data/cve/CVE-2026-118306.md) | Urgent | Chromium: CVE-2026-118306 Memory corruption in FileSystem | 9.6 | 0.0037 | | | [CVE-2026-118348](https://patchblox.com/security/data/cve/CVE-2026-118348.md) | Urgent | Chromium: CVE-2026-118348 Improper input validation in Skia | 9.6 | 0.0034 | | | [CVE-2026-118331](https://patchblox.com/security/data/cve/CVE-2026-118331.md) | Urgent | Chromium: CVE-2026-118331 Improper input validation in FileAPI | 8.8 | 0.0034 | | | [CVE-2026-118344](https://patchblox.com/security/data/cve/CVE-2026-118344.md) | Urgent | Chromium: CVE-2026-118344 Use after free in Layout | 8.8 | 0.0034 | | | [CVE-2026-118305](https://patchblox.com/security/data/cve/CVE-2026-118305.md) | High | Chromium: CVE-2026-118305 Memory corruption in Turbolev | 9.6 | 0.0040 | | | [CVE-2026-118358](https://patchblox.com/security/data/cve/CVE-2026-118358.md) | High | Chromium: CVE-2026-118358 Memory corruption in WebAudio | 8.8 | 0.0036 | | | [CVE-2026-118330](https://patchblox.com/security/data/cve/CVE-2026-118330.md) | High | Chromium: CVE-2026-118330 Use after free in Browser | 8.8 | 0.0033 | | | [CVE-2026-118307](https://patchblox.com/security/data/cve/CVE-2026-118307.md) | High | Chromium: CVE-2026-118307 Use after free in Paint | 8.8 | 0.0033 | | | [CVE-2026-118317](https://patchblox.com/security/data/cve/CVE-2026-118317.md) | High | Chromium: CVE-2026-118317 Memory corruption in HTML | 8.8 | 0.0032 | | | [CVE-2026-118339](https://patchblox.com/security/data/cve/CVE-2026-118339.md) | High | Chromium: CVE-2026-118339 Use after free in Animation | 8.8 | 0.0032 | | | [CVE-2026-118308](https://patchblox.com/security/data/cve/CVE-2026-118308.md) | High | Chromium: CVE-2026-118308 Use after free in SVG | 9.6 | 0.0031 | | | [CVE-2026-118310](https://patchblox.com/security/data/cve/CVE-2026-118310.md) | High | Chromium: CVE-2026-118310 Improper input validation in Views | 9.6 | 0.0031 | | | [CVE-2026-118316](https://patchblox.com/security/data/cve/CVE-2026-118316.md) | High | Chromium: CVE-2026-118316 Improper input validation in V8 | 9.6 | 0.0030 | | | [CVE-2026-118332](https://patchblox.com/security/data/cve/CVE-2026-118332.md) | High | Chromium: CVE-2026-118332 Improper input validation in Compositing | 9.6 | 0.0030 | | | [CVE-2026-118342](https://patchblox.com/security/data/cve/CVE-2026-118342.md) | High | Chromium: CVE-2026-118342 Out of bounds write in Editing | 9.6 | 0.0030 | | | [CVE-2026-118355](https://patchblox.com/security/data/cve/CVE-2026-118355.md) | High | Chromium: CVE-2026-118355 Improper input validation in Command | 9.6 | 0.0030 | | | [CVE-2026-118315](https://patchblox.com/security/data/cve/CVE-2026-118315.md) | High | Chromium: CVE-2026-118315 Improper input validation in SVG | 8.8 | 0.0029 | | | [CVE-2026-118350](https://patchblox.com/security/data/cve/CVE-2026-118350.md) | High | Chromium: CVE-2026-118350 Use after free in Turbolev | 8.8 | 0.0029 | | | [CVE-2026-118357](https://patchblox.com/security/data/cve/CVE-2026-118357.md) | High | Chromium: CVE-2026-118357 Use after free in FileSystem | 8.8 | 0.0028 | | | [CVE-2026-118359](https://patchblox.com/security/data/cve/CVE-2026-118359.md) | High | Chromium: CVE-2026-118359 Memory corruption in V8 | 8.8 | 0.0028 | | | [CVE-2026-118304](https://patchblox.com/security/data/cve/CVE-2026-118304.md) | High | Chromium: CVE-2026-118304 Improper input validation in SVG | 8.8 | 0.0028 | | | [CVE-2026-118311](https://patchblox.com/security/data/cve/CVE-2026-118311.md) | High | Chromium: CVE-2026-118311 Memory corruption in Media | 8.8 | 0.0028 | | | [CVE-2026-118313](https://patchblox.com/security/data/cve/CVE-2026-118313.md) | High | Chromium: CVE-2026-118313 Use after free in Video | 8.8 | 0.0028 | | | [CVE-2026-118345](https://patchblox.com/security/data/cve/CVE-2026-118345.md) | High | Chromium: CVE-2026-118345 Use after free in PDFium | 8.8 | 0.0027 | | | [CVE-2026-118340](https://patchblox.com/security/data/cve/CVE-2026-118340.md) | High | Chromium: CVE-2026-118340 Memory corruption in Skia | 9.6 | 0.0027 | | | [CVE-2026-118328](https://patchblox.com/security/data/cve/CVE-2026-118328.md) | High | Chromium: CVE-2026-118328 Improper input validation in WebRTC | 8.8 | 0.0027 | | | [CVE-2026-118351](https://patchblox.com/security/data/cve/CVE-2026-118351.md) | High | Chromium: CVE-2026-118351 Memory corruption in Skia | 9.6 | 0.0026 | | | [CVE-2026-118334](https://patchblox.com/security/data/cve/CVE-2026-118334.md) | High | Chromium: CVE-2026-118334 Use after free in ImageCapture | 8.8 | 0.0026 | | | [CVE-2026-118341](https://patchblox.com/security/data/cve/CVE-2026-118341.md) | High | Chromium: CVE-2026-118341 Use after free in Modularization | 8.8 | 0.0026 | | | [CVE-2026-118343](https://patchblox.com/security/data/cve/CVE-2026-118343.md) | High | Chromium: CVE-2026-118343 Improper input validation in ReadingList | 8.8 | 0.0026 | | | [CVE-2026-118347](https://patchblox.com/security/data/cve/CVE-2026-118347.md) | High | Chromium: CVE-2026-118347 Use after free in FileSystem | 8.8 | 0.0026 | | | [CVE-2026-118349](https://patchblox.com/security/data/cve/CVE-2026-118349.md) | High | Chromium: CVE-2026-118349 Memory corruption in Payments | 8.8 | 0.0026 | | | [CVE-2026-118352](https://patchblox.com/security/data/cve/CVE-2026-118352.md) | High | Chromium: CVE-2026-118352 Memory corruption in Cache | 8.8 | 0.0026 | | | [CVE-2026-118356](https://patchblox.com/security/data/cve/CVE-2026-118356.md) | High | Chromium: CVE-2026-118356 Use after free in WTF | 8.8 | 0.0026 | | | [CVE-2026-118320](https://patchblox.com/security/data/cve/CVE-2026-118320.md) | High | Chromium: CVE-2026-118320 Memory corruption in V8 | 8.8 | 0.0025 | | | [CVE-2026-118336](https://patchblox.com/security/data/cve/CVE-2026-118336.md) | High | Chromium: CVE-2026-118336 Improper input validation in Headless | 8.8 | 0.0025 | | | [CVE-2026-118333](https://patchblox.com/security/data/cve/CVE-2026-118333.md) | High | Chromium: CVE-2026-118333 Missing authorization in Video | 9.3 | 0.0025 | | | [CVE-2026-118354](https://patchblox.com/security/data/cve/CVE-2026-118354.md) | High | Chromium: CVE-2026-118354 Improper input validation in Skia | 9.6 | 0.0024 | | | [CVE-2026-118312](https://patchblox.com/security/data/cve/CVE-2026-118312.md) | High | Chromium: CVE-2026-118312 Memory corruption in Paint | 9.6 | 0.0023 | | | [CVE-2026-118337](https://patchblox.com/security/data/cve/CVE-2026-118337.md) | High | Chromium: CVE-2026-118337 Improper access control in Forms | 9.3 | 0.0023 | | | [CVE-2026-118322](https://patchblox.com/security/data/cve/CVE-2026-118322.md) | High | Chromium: CVE-2026-118322 Memory corruption in ANGLE | 8.8 | 0.0022 | | | [CVE-2026-118327](https://patchblox.com/security/data/cve/CVE-2026-118327.md) | High | Chromium: CVE-2026-118327 Memory corruption in Media | 8.8 | 0.0022 | | | [CVE-2026-118338](https://patchblox.com/security/data/cve/CVE-2026-118338.md) | High | Chromium: CVE-2026-118338 Use after free in Animation | 8.8 | 0.0022 | | | [CVE-2026-118346](https://patchblox.com/security/data/cve/CVE-2026-118346.md) | High | Chromium: CVE-2026-118346 Use after free in Compositing | 8.8 | 0.0022 | | | [CVE-2026-118353](https://patchblox.com/security/data/cve/CVE-2026-118353.md) | High | Chromium: CVE-2026-118353 Use after free in Paint | 8.8 | 0.0021 | | | [CVE-2026-118319](https://patchblox.com/security/data/cve/CVE-2026-118319.md) | High | Chromium: CVE-2026-118319 Memory corruption in Skia | 9.6 | 0.0021 | | | [CVE-2026-118318](https://patchblox.com/security/data/cve/CVE-2026-118318.md) | Routine | Chromium: CVE-2026-118318 Improper access control in V8 | 4.3 | 0.0028 | | --- Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.