Microsoft Edge 146.0.3856.97
Microsoft Edge 146.0.3856.97, released April 1, 2026, fixes 18 CVEs in Microsoft Edge. One of them is being exploited (CVE-2026-5281); 1 on CISA KEV. Patch Radar priority: Patch now. The latest Microsoft Edge is 156.0.4314.58, which also fixes every one of these CVEs.
Superseded. The latest Microsoft Edge is 156.0.4314.58, which also fixes every CVE on this page. Install that instead.
Priority of the 18 CVEs
Applies to
| Product | Version |
|---|---|
| Microsoft Edge | 146.0.3856.97 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-5281 | Chromium: CVE-2026-5281 Use after free in Dawn | 8.8 | 0.1374 | KEVExploited |
| Urgent | CVE-2026-5275 | Chromium: CVE-2026-5275 Heap buffer overflow in ANGLE | 9.6 | 0.0045 | None reported |
| Urgent | CVE-2026-5289 | Chromium: CVE-2026-5289 Use after free in Navigation | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-5277 | Chromium: CVE-2026-5277 Integer overflow in ANGLE | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-5290 | Chromium: CVE-2026-5290 Use after free in Compositing | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-5283 | Chromium: CVE-2026-5283 Inappropriate implementation in ANGLE | 9.6 | 0.0027 | None reported |
| High | CVE-2026-5272 | Chromium: CVE-2026-5272 Heap buffer overflow in GPU | 8.8 | 0.0056 | None reported |
| High | CVE-2026-5287 | Chromium: CVE-2026-5287 Use after free in PDF | 8.8 | 0.0051 | None reported |
| High | CVE-2026-5279 | Chromium: CVE-2026-5279 Object corruption in V8 | 8.8 | 0.0044 | None reported |
| High | CVE-2026-5274 | Chromium: CVE-2026-5274 Integer overflow in Codecs | 8.8 | 0.0043 | None reported |
| High | CVE-2026-5285 | Chromium: CVE-2026-5285 Use after free in WebGL | 8.8 | 0.0040 | None reported |
| High | CVE-2026-5280 | Chromium: CVE-2026-5280 Use after free in WebCodecs | 8.8 | 0.0039 | None reported |
| High | CVE-2026-5286 | Chromium: CVE-2026-5286 Use after free in Dawn | 8.8 | 0.0039 | None reported |
| High | CVE-2026-5284 | Chromium: CVE-2026-5284 Use after free in Dawn | 7.5 | 0.0035 | None reported |
| High | CVE-2026-5292 | Chromium: CVE-2026-5292 Out of bounds read in WebCodecs | 8.8 | 0.0032 | None reported |
| Routine | CVE-2026-5273 | Chromium: CVE-2026-5273 Use after free in CSS | 6.3 | 0.0036 | None reported |
| Routine | CVE-2026-5276 | Chromium: CVE-2026-5276 Insufficient policy enforcement in WebUSB | 6.5 | 0.0025 | None reported |
| Routine | CVE-2026-5291 | Chromium: CVE-2026-5291 Inappropriate implementation in WebGL | 6.5 | 0.0025 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.