Should you update to Microsoft Edge 149.0.4022.96?
No: install Microsoft Edge 156.0.4314.58 instead. Microsoft Edge 149.0.4022.96 is a security update Microsoft released on 25 Jun 2026 for Mac and Windows. It fixes 18 security flaws.[1] None of them is known to be used in attacks.
It has since been replaced by Microsoft Edge 149.0.4022.105, released 2 Jul 2026, which includes all of its fixes. If you’re on an older version, install that instead.
Should you update?
No: install Microsoft Edge 156.0.4314.58 instead. Microsoft Edge 156.0.4314.58 came out on 30 Oct 2026 and includes every fix in Microsoft Edge 149.0.4022.96, so there’s no reason to stop at this one. Software Update offers the newest version your device can run.
Is Microsoft Edge 149.0.4022.96 still safe?
Not any more. The 37 updates since, up to Microsoft Edge 156.0.4314.58, fix 2,437 security flaws that Microsoft Edge 149.0.4022.96 doesn’t, and each became public the day its fix shipped. Installing it is safe: get it only from Edge’s own About page (Edge updates itself; there’s nothing to download from a website), never from a link in an email, text or pop-up.
What it fixes
Microsoft lists 18 security flaws.[1] Microsoft doesn’t rate them by severity. They are:
| Flaw | Severity | What Microsoft calls it |
|---|---|---|
CVE-2026-13021 | Not rated | Chromium: CVE-2026-13021 Inappropriate implementation in DeviceBoundSessionCredentials |
CVE-2026-13022 | Not rated | Chromium: CVE-2026-13022 Inappropriate implementation in Autofill |
CVE-2026-13023 | Not rated | Chromium: CVE-2026-13023 Uninitialized Use in GPU |
CVE-2026-13024 | Not rated | Chromium: CVE-2026-13024 Insufficient validation of untrusted input in Navigation |
CVE-2026-13025 | Not rated | Chromium: CVE-2026-13025 Insufficient validation of untrusted input in DevTools |
CVE-2026-13026 | Not rated | Chromium: CVE-2026-13026 Use after free in Digital Credentials |
CVE-2026-13027 | Not rated | Chromium: CVE-2026-13027 Use after free in FileSystem |
CVE-2026-13028 | Not rated | Chromium: CVE-2026-13028 Use after free in WebGL |
CVE-2026-13029 | Not rated | Chromium: CVE-2026-13029 Use after free in Web Authentication |
CVE-2026-13030 | Not rated | Chromium: CVE-2026-13030 Uninitialized Use in GPU |
CVE-2026-13031 | Not rated | Chromium: CVE-2026-13031 Use after free in Blink |
CVE-2026-13032 | Not rated | Chromium: CVE-2026-13032 Use after free in WebGL |
CVE-2026-13033 | Not rated | Chromium: CVE-2026-13033 Out of bounds read in Blink>InterestGroups |
CVE-2026-13034 | Not rated | Chromium: CVE-2026-13034 Inappropriate implementation in Passwords |
CVE-2026-13035 | Not rated | Chromium: CVE-2026-13035 Use after free in Bluetooth |
CVE-2026-13036 | Not rated | Chromium: CVE-2026-13036 Use after free in Blink |
CVE-2026-13037 | Not rated | Chromium: CVE-2026-13037 Use after free in WebView |
CVE-2026-13038 | Not rated | Chromium: CVE-2026-13038 Use after free in Autofill |
How to update, and how long it takes
A minute or two. Edge restarts and reopens your tabs.
- Open Edge and click the three dots (…) at the top right.Choose Help and feedback, then About Microsoft Edge.
- Let it download the update.Edge checks as soon as that page opens. When it’s done, click Restart.
To check it worked: Three dots (…) → Help and feedback → About Microsoft Edge: the version is under the name, e.g. 157.0.4341.42. It should say 149.0.4022.105 or later.
149.0.4022.80 vs 149.0.4022.96
Microsoft Edge 149.0.4022.80, released 18 Jun 2026, fixed 35 security flaws. Microsoft Edge 149.0.4022.96 fixes 18 security flaws and includes the fixes before it, so going straight to 149.0.4022.96 gets you both.
- Before: Microsoft Edge 149.0.4022.80, 18 Jun 2026, 35 security flaws
- After: Microsoft Edge 149.0.4022.105, 2 Jul 2026, 2 security flaws
- Microsoft Edge updates, every release and the latest version
- Updates, the latest version of everything HARD tracks
References
- ^ Microsoft. “Microsoft Edge security release notes, June 25, 2026”, 25 Jun 2026.