Microsoft Edge WebView2 Runtime 149.0.4022.52
Microsoft Edge WebView2 Runtime 149.0.4022.52, released June 4, 2026, fixes 329 CVEs in Microsoft Edge WebView2 Runtime. None of them is reported as exploited. Patch Radar priority: Urgent. The latest Microsoft Edge WebView2 Runtime is 157.0.4341.42, which also fixes every one of these CVEs.
Superseded. The latest Microsoft Edge WebView2 Runtime is 157.0.4341.42, which also fixes every CVE on this page. Install that instead.
Priority of the 329 CVEs
Applies to
| Product | Version |
|---|---|
| Microsoft Edge WebView2 Runtime | 149.0.4022.52 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-10886 | Chromium: CVE-2026-10886 Use after free in FileSystem | 9.6 | 0.0586 | None reported |
| Urgent | CVE-2026-10881 | Chromium: CVE-2026-10881 Out of bounds read and write in ANGLE | 9.6 | 0.0063 | None reported |
| Urgent | CVE-2026-10974 | Chromium: CVE-2026-10974 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0034 | None reported |
| Urgent | CVE-2026-11088 | Chromium: CVE-2026-11088 Integer overflow in ANGLE | 9.6 | 0.0034 | None reported |
| Urgent | CVE-2026-10931 | Chromium: CVE-2026-10931 Use after free in FileSystem | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-10983 | Chromium: CVE-2026-10983 Insufficient validation of untrusted input in Dawn | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-11009 | Chromium: CVE-2026-11009 Use after free in USB | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-11021 | Chromium: CVE-2026-11021 Insufficient validation of untrusted input in GPU | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-10971 | Chromium: CVE-2026-10971 Insufficient validation of untrusted input in Printing | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-10990 | Chromium: CVE-2026-10990 Use after free in Glic | 9.6 | 0.0030 | None reported |
| Urgent | CVE-2026-11002 | Chromium: CVE-2026-11002 Use after free in Autofill | 9.6 | 0.0030 | None reported |
| Urgent | CVE-2026-11047 | Chromium: CVE-2026-11047 Insufficient validation of untrusted input in Base | 9.6 | 0.0030 | None reported |
| Urgent | CVE-2026-10966 | Chromium: CVE-2026-10966 Insufficient validation of untrusted input in Codecs | 9.6 | 0.0030 | None reported |
| Urgent | CVE-2026-11113 | Chromium: CVE-2026-11113 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0028 | None reported |
| Urgent | CVE-2026-11037 | Chromium: CVE-2026-11037 Out of bounds write in Codecs | 9.6 | 0.0028 | None reported |
| Urgent | CVE-2026-11095 | Chromium: CVE-2026-11095 Insufficient validation of untrusted input in Codecs | 9.6 | 0.0028 | None reported |
| Urgent | CVE-2026-11061 | Chromium: CVE-2026-11061 Out of bounds read in ANGLE | 9.6 | 0.0027 | None reported |
| Urgent | CVE-2026-11066 | Chromium: CVE-2026-11066 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0027 | None reported |
| Urgent | CVE-2026-11120 | Chromium: CVE-2026-11120 Insufficient validation of untrusted input in Enterprise Reporting | 9.6 | 0.0027 | None reported |
| Urgent | CVE-2026-11153 | Chromium: CVE-2026-11153 Side-channel information leakage in Forms | 9.1 | 0.0026 | None reported |
| Urgent | CVE-2026-11052 | Chromium: CVE-2026-11052 Type Confusion in GPU | 9.6 | 0.0026 | None reported |
| Urgent | CVE-2026-11250 | Chromium: CVE-2026-11250 Inappropriate implementation in DevTools | 9.6 | 0.0024 | None reported |
| Urgent | CVE-2026-11056 | Chromium: CVE-2026-11056 Insufficient validation of untrusted input in SiteIsolation | 9.6 | 0.0023 | None reported |
| Urgent | CVE-2026-11063 | Chromium: CVE-2026-11063 Insufficient validation of untrusted input in WebNN | 9.6 | 0.0023 | None reported |
| Urgent | CVE-2026-11094 | Chromium: CVE-2026-11094 Use after free in Codecs | 9.6 | 0.0023 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.