Windows apps · Application version · February 5, 2024

Microsoft Edge 121.0.2277.112

Microsoft Edge 121.0.2277.112, released February 5, 2024, fixes 34 CVEs in Microsoft Edge. 2 of them are being exploited (CVE-2023-7024); 2 on CISA KEV. Patch Radar priority: Patch now. The latest Microsoft Edge is 156.0.4314.58, which also fixes every one of these CVEs.

Patch now2 on CISA KEV

Superseded. The latest Microsoft Edge is 156.0.4314.58, which also fixes every CVE on this page. Install that instead.

CVEs closed
34
1 rated Critical
Exploited
2
CVE-2023-7024
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.3563
98th percentile

Priority of the 34 CVEs

Patch now 2 Urgent 1 High 17 Routine 14

Applies to

ProductVersion
Microsoft Edge121.0.2277.112

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Patch now CVE-2023-7024 Chromium: CVE-2023-7024 Heap buffer overflow in WebRTC8.8 0.0667 KEVExploited
Patch now CVE-2024-0519 Chromium: CVE-2024-0519 Out of bounds memory access in V88.8 0.0380 KEVExploited
Urgent CVE-2024-0808 Chromium: CVE-2024-0808 Integer underflow in WebUI9.8 0.0055 None reported
High CVE-2024-0517 Chromium: CVE-2024-0517 Out of bounds write in V88.8 0.2170 None reported
High CVE-2024-0223 Chromium: CVE-2024-0223 Heap buffer overflow in ANGLE8.8 0.1020 None reported
High CVE-2024-21326 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability9.6 0.0123 Exploitation Less Likely
High CVE-2024-21399 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability8.3 0.0123 Exploitation Less Likely
High CVE-2024-0222 Chromium: CVE-2024-0222 Use after free in ANGLE8.8 0.0107 None reported
High CVE-2024-0224 Chromium: CVE-2024-0224 Use after free in WebAudio8.8 0.0102 None reported
High CVE-2024-0225 Chromium: CVE-2024-0225 Use after free in WebGPU8.8 0.0101 None reported
High CVE-2024-21385 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.3 0.0096 Exploitation Less Likely
High CVE-2024-1059 Chromium: CVE-2024-1059 Use after free in WebRTC8.8 0.0095 None reported
High CVE-2024-0518 Chromium: CVE-2024-0518 Type Confusion in V88.8 0.0094 None reported
High CVE-2024-1077 Chromium: CVE-2024-1077 Use after free in Network8.8 0.0094 None reported
High CVE-2024-1060 Chromium: CVE-2024-1060 Use after free in Canvas8.8 0.0089 None reported
High CVE-2024-0804 Chromium: CVE-2024-0804 Insufficient policy enforcement in iOS Security UI7.5 0.0049 None reported
High CVE-2024-0812 Chromium: CVE-2024-0812 Inappropriate implementation in Accessibility8.8 0.0048 None reported
High CVE-2024-0807 Chromium: CVE-2024-0807 Use after free in WebAudio8.8 0.0048 None reported
High CVE-2024-0806 Chromium: CVE-2024-0806 Use after free in Passwords8.8 0.0045 None reported
High CVE-2024-0813 Chromium: CVE-2024-0813 Use after free in Reading Mode8.8 0.0038 None reported
Routine CVE-2024-21388 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability6.5 0.3563 Exploitation Less Likely
Routine CVE-2024-21387 Microsoft Edge for Android Spoofing Vulnerability5.3 0.0072 Exploitation Less Likely
Routine CVE-2024-20721 Adobe Systems Incorporated: CVE-2024-20721 Improper Input Validation Denial of Service Vulnerability5.5 0.0072 Exploitation Less Likely
Routine CVE-2024-20709 Adobe Systems Incorporated: CVE-2024-20709 Javascript Implementation PDF Vulnerability5.5 0.0060 Exploitation Less Likely
Routine CVE-2024-0811 Chromium: CVE-2024-0811 Inappropriate implementation in Extensions API4.3 0.0058 None reported
Showing 1 to 25 of 34 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.