Microsoft Edge 149.0.4022.96
Microsoft Edge 149.0.4022.96, released June 24, 2026, fixes 13 CVEs in Microsoft Edge. None of them is reported as exploited. Patch Radar priority: High. The latest Microsoft Edge is 157.0.4341.46, which also fixes every one of these CVEs.
Superseded. The latest Microsoft Edge is 157.0.4341.46, which also fixes every CVE on this page. Install that instead.
Priority of the 13 CVEs
Applies to
| Product | Version |
|---|---|
| Microsoft Edge | 149.0.4022.96 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2026-13031 | Chromium: CVE-2026-13031 Use after free in Blink | 8.8 | 0.0038 | None reported |
| High | CVE-2026-13033 | Chromium: CVE-2026-13033 Out of bounds read in Blink>InterestGroups | 8.8 | 0.0038 | None reported |
| High | CVE-2026-13036 | Chromium: CVE-2026-13036 Use after free in Blink | 8.8 | 0.0038 | None reported |
| High | CVE-2026-13035 | Chromium: CVE-2026-13035 Use after free in Bluetooth | 8.8 | 0.0035 | None reported |
| High | CVE-2026-13026 | Chromium: CVE-2026-13026 Use after free in Digital Credentials | 8.8 | 0.0032 | None reported |
| High | CVE-2026-13027 | Chromium: CVE-2026-13027 Use after free in FileSystem | 8.8 | 0.0032 | None reported |
| High | CVE-2026-13025 | Chromium: CVE-2026-13025 Insufficient validation of untrusted input in DevTools | 8.3 | 0.0030 | None reported |
| High | CVE-2026-13029 | Chromium: CVE-2026-13029 Use after free in Web Authentication | 7.5 | 0.0025 | None reported |
| Routine | CVE-2026-13023 | Chromium: CVE-2026-13023 Uninitialized Use in GPU | 5.3 | 0.0029 | None reported |
| Routine | CVE-2026-13024 | Chromium: CVE-2026-13024 Insufficient validation of untrusted input in Navigation | 4.2 | 0.0023 | None reported |
| Routine | CVE-2026-13034 | Chromium: CVE-2026-13034 Inappropriate implementation in Passwords | 4.7 | 0.0020 | None reported |
| Routine | CVE-2026-13021 | Chromium: CVE-2026-13021 Inappropriate implementation in DeviceBoundSessionCredentials | 4.3 | 0.0020 | None reported |
| Routine | CVE-2026-13022 | Chromium: CVE-2026-13022 Inappropriate implementation in Autofill | 6.5 | 0.0020 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.