Microsoft Edge 149.0.4022.80
Microsoft Edge 149.0.4022.80, released June 17, 2026, fixes 505 CVEs in Microsoft Edge. One of them is being exploited (CVE-2026-11645); 1 on CISA KEV. Patch Radar priority: Patch now. The latest Microsoft Edge is 157.0.4341.46, which also fixes every one of these CVEs.
Superseded. The latest Microsoft Edge is 157.0.4341.46, which also fixes every CVE on this page. Install that instead.
Priority of the 505 CVEs
Applies to
| Product | Version |
|---|---|
| Microsoft Edge | 149.0.4022.80 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-11645 | Chromium: CVE-2026-11645 Out of bounds memory access in V8 | 8.8 | 0.0244 | KEVExploited |
| Urgent | CVE-2026-10886 | Chromium: CVE-2026-10886 Use after free in FileSystem | 9.6 | 0.0586 | None reported |
| Urgent | CVE-2026-10881 | Chromium: CVE-2026-10881 Out of bounds read and write in ANGLE | 9.6 | 0.0063 | None reported |
| Urgent | CVE-2026-10883 | Chromium: CVE-2026-10883 Out of bounds write in ANGLE | 9.6 | 0.0063 | None reported |
| Urgent | CVE-2026-9893 | Chromium: CVE-2026-9893 Use after free in Skia | 9.6 | 0.0044 | None reported |
| Urgent | CVE-2026-10941 | Chromium: CVE-2026-10941 Out of bounds memory access in Skia | 9.6 | 0.0044 | None reported |
| Urgent | CVE-2026-11024 | Chromium: CVE-2026-11024 Stack buffer overflow in Skia | 9.6 | 0.0037 | None reported |
| Urgent | CVE-2026-10977 | Chromium: CVE-2026-10977 Uninitialized Use in Skia | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-10994 | Chromium: CVE-2026-10994 Uninitialized Use in ANGLE | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-10993 | Chromium: CVE-2026-10993 Heap buffer overflow in Skia | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-9910 | Chromium: CVE-2026-9910 Out of bounds memory access in ANGLE | 9.6 | 0.0034 | None reported |
| Urgent | CVE-2026-10907 | Chromium: CVE-2026-10907 Out of bounds write in ANGLE | 9.6 | 0.0034 | None reported |
| Urgent | CVE-2026-10974 | Chromium: CVE-2026-10974 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0034 | None reported |
| Urgent | CVE-2026-11065 | Chromium: CVE-2026-11065 Use after free in ANGLE | 9.6 | 0.0034 | None reported |
| Urgent | CVE-2026-11088 | Chromium: CVE-2026-11088 Integer overflow in ANGLE | 9.6 | 0.0034 | None reported |
| Urgent | CVE-2026-11651 | Chromium: CVE-2026-11651 Use after free in Network | 9.6 | 0.0034 | None reported |
| Urgent | CVE-2026-9878 | Chromium: CVE-2026-9878 Use after free in ANGLE | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-10931 | Chromium: CVE-2026-10931 Use after free in FileSystem | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-10983 | Chromium: CVE-2026-10983 Insufficient validation of untrusted input in Dawn | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-10979 | Chromium: CVE-2026-10979 Out of bounds read in ANGLE | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-10985 | Chromium: CVE-2026-10985 Out of bounds read in Skia | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-9927 | Chromium: CVE-2026-9927 Use after free in ANGLE | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-9941 | Chromium: CVE-2026-9941 Use after free in ANGLE | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-10930 | Chromium: CVE-2026-10930 Out of bounds read in ANGLE | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-9879 | Chromium: CVE-2026-9879 Out of bounds write in ANGLE | 9.6 | 0.0031 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.