Microsoft Edge WebView2 Runtime 150.0.4078.48
Microsoft Edge WebView2 Runtime 150.0.4078.48, released July 2, 2026, fixes 335 CVEs in Microsoft Edge WebView2 Runtime. None of them is reported as exploited. Patch Radar priority: Urgent. The latest Microsoft Edge WebView2 Runtime is 157.0.4341.42, which also fixes every one of these CVEs.
Superseded. The latest Microsoft Edge WebView2 Runtime is 157.0.4341.42, which also fixes every CVE on this page. Install that instead.
Priority of the 335 CVEs
Applies to
| Product | Version |
|---|---|
| Microsoft Edge WebView2 Runtime | 150.0.4078.48 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-58596 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 8.3 | 0.0061 | More likely |
| Urgent | CVE-2026-14405 | Chromium: CVE-2026-14405 Uninitialized Use in V8 | 9.6 | 0.0050 | None reported |
| Urgent | CVE-2026-13901 | Chromium: CVE-2026-13901 Insufficient validation of untrusted input in Serial | 9.6 | 0.0044 | None reported |
| Urgent | CVE-2026-13780 | Chromium: CVE-2026-13780 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0043 | None reported |
| Urgent | CVE-2026-13781 | Chromium: CVE-2026-13781 Insufficient validation of untrusted input in Skia | 9.6 | 0.0043 | None reported |
| Urgent | CVE-2026-13834 | Chromium: CVE-2026-13834 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0041 | None reported |
| Urgent | CVE-2026-13883 | Chromium: CVE-2026-13883 Type Confusion in ANGLE | 9.6 | 0.0041 | None reported |
| Urgent | CVE-2026-14104 | Chromium: CVE-2026-14104 Insufficient validation of untrusted input in WebAppInstalls | 9.8 | 0.0040 | None reported |
| Urgent | CVE-2026-13841 | Chromium: CVE-2026-13841 Integer overflow in Skia | 9.6 | 0.0039 | None reported |
| Urgent | CVE-2026-13859 | Chromium: CVE-2026-13859 Inappropriate implementation in ANGLE | 9.6 | 0.0038 | None reported |
| Urgent | CVE-2026-13971 | Chromium: CVE-2026-13971 Uninitialized Use in Skia | 9.6 | 0.0038 | None reported |
| Urgent | CVE-2026-14423 | Chromium: CVE-2026-14423 Type Confusion in Tint | 9.6 | 0.0038 | None reported |
| Urgent | CVE-2026-13798 | Chromium: CVE-2026-13798 Heap buffer overflow in Chromecast | 9.6 | 0.0037 | None reported |
| Urgent | CVE-2026-13877 | Chromium: CVE-2026-13877 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0037 | None reported |
| Urgent | CVE-2026-13776 | Chromium: CVE-2026-13776 Type Confusion in Dawn | 9.8 | 0.0035 | None reported |
| Urgent | CVE-2026-13869 | Chromium: CVE-2026-13869 Use after free in Device | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-13909 | Chromium: CVE-2026-13909 Insufficient policy enforcement in DevTools | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-13920 | Chromium: CVE-2026-13920 Insufficient validation of untrusted input in Media | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-13934 | Chromium: CVE-2026-13934 Insufficient validation of untrusted input in Dawn | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-14017 | Chromium: CVE-2026-14017 Inappropriate implementation in Navigation | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-14037 | Chromium: CVE-2026-14037 Insufficient policy enforcement in GPU | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-14043 | Chromium: CVE-2026-14043 Use after free in GetUserMedia | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-14055 | Chromium: CVE-2026-14055 Insufficient validation of untrusted input in Device Trust | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-14109 | Chromium: CVE-2026-14109 Insufficient policy enforcement in Mojo | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-14392 | Chromium: CVE-2026-14392 Out of bounds write in Tint | 9.6 | 0.0035 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.