Should you update to Microsoft Edge 152.0.4191.62?
No: install Microsoft Edge 156.0.4314.58 instead. Microsoft Edge 152.0.4191.62 is a security update Microsoft released on 2 Sep 2026 for Mac and Windows. It fixes 24 security flaws.[1] One of them is already being used in attacks.
It has since been replaced by Microsoft Edge 152.0.4191.66, released 4 Sep 2026, which includes all of its fixes. If you’re on an older version, install that instead.
Should you update?
No: install Microsoft Edge 156.0.4314.58 instead. Microsoft Edge 156.0.4314.58 came out on 30 Oct 2026 and includes every fix in Microsoft Edge 152.0.4191.62, so there’s no reason to stop at this one. Software Update offers the newest version your device can run.
Is Microsoft Edge 152.0.4191.62 still safe?
Not any more. The 19 updates since, up to Microsoft Edge 156.0.4314.58, fix 1,168 security flaws that Microsoft Edge 152.0.4191.62 doesn’t, and each became public the day its fix shipped. Installing it is safe: get it only from Edge’s own About page (Edge updates itself; there’s nothing to download from a website), never from a link in an email, text or pop-up.
What it fixes
Microsoft lists 24 security flaws.[1] Microsoft doesn’t rate them by severity. They are:
| Flaw | Severity | What Microsoft calls it |
|---|---|---|
CVE-2026-84323 | Not rated | Chromium: CVE-2026-84323 Missing authorization in FileSystem |
CVE-2026-84324 | Not rated | Chromium: CVE-2026-84324 Use after free in Proxy |
CVE-2026-84325 | Not rated | Chromium: CVE-2026-84325 Improper input validation in DataTransfer |
CVE-2026-84326 | Not rated | Chromium: CVE-2026-84326 Uninitialized resource in V8 |
CVE-2026-84327 | Not rated | Chromium: CVE-2026-84327 Incorrect authorization in Autofill |
CVE-2026-84328 | Not rated | Chromium: CVE-2026-84328 Missing authorization in FileSystem |
CVE-2026-84329 | Not rated | Chromium: CVE-2026-84329 Confused deputy in CredentialProvider |
CVE-2026-84331 | Not rated | Chromium: CVE-2026-84331 Incorrect authorization in Actor |
CVE-2026-84332 | Not rated | Chromium: CVE-2026-84332 Incorrect authorization in SiteSettings |
CVE-2026-84334 | Not rated | Chromium: CVE-2026-84334 Incorrect authorization in Chromoting |
CVE-2026-84335 | Not rated | Chromium: CVE-2026-84335 Incorrect authorization in TabStrip |
CVE-2026-84347 | Not rated | Chromium: CVE-2026-84347 Use after free in WebRTC |
CVE-2026-84348 | Not rated | Chromium: CVE-2026-84348 Information leak in MediaCapture |
CVE-2026-84349 | Not rated | Chromium: CVE-2026-84349 Use after free in Browser |
CVE-2026-84350 | Not rated | Chromium: CVE-2026-84350 Use after free in TabStrip |
CVE-2026-84351 | Not rated | Chromium: CVE-2026-84351 Buffer overflow in GPU |
CVE-2026-84353 | Not rated | Chromium: CVE-2026-84353 Use after free in Shared Tab Groups |
CVE-2026-84354 | Not rated | Chromium: CVE-2026-84354 Incorrect authorization in FileSystem |
CVE-2026-84355 | Not rated | Chromium: CVE-2026-84355 Incorrect authorization in Navigation |
CVE-2026-84356 | Not rated | Chromium: CVE-2026-84356 UI misrepresentation in FullScreen |
CVE-2026-84357 | Not rated | Chromium: CVE-2026-84357 Improper input validation in Omnibox |
CVE-2026-84358 | Not rated | Chromium: CVE-2026-84358 Improper privilege management in Downloads |
CVE-2026-84359 | Not rated | Chromium: CVE-2026-84359 Information leak in Skia |
CVE-2026-85046 | Not rated | Chromium: CVE-2026-85046 Type confusion in V8 |
Used in attacks
This fix closes a flaw that attackers were already using before the update came out, either on CISA’s list of flaws being used in attacks or in Microsoft’s own words.[2]
How to update, and how long it takes
A minute or two. Edge restarts and reopens your tabs.
- Open Edge and click the three dots (…) at the top right.Choose Help and feedback, then About Microsoft Edge.
- Let it download the update.Edge checks as soon as that page opens. When it’s done, click Restart.
To check it worked: Three dots (…) → Help and feedback → About Microsoft Edge: the version is under the name, e.g. 157.0.4341.42. It should say 152.0.4191.66 or later.
152.0.4191.52 vs 152.0.4191.62
Microsoft Edge 152.0.4191.52, released 28 Aug 2026, fixed 1 security flaw. Microsoft Edge 152.0.4191.62 fixes 24 security flaws and includes the fixes before it, so going straight to 152.0.4191.62 gets you both.
- Before: Microsoft Edge 152.0.4191.52, 28 Aug 2026, 1 security flaw
- After: Microsoft Edge 152.0.4191.66, 4 Sep 2026, 10 security flaws
- Microsoft Edge updates, every release and the latest version
- Updates, the latest version of everything HARD tracks
References
- ^ Microsoft. “Microsoft Edge security release notes, September 2, 2026”, 2 Sep 2026.
- ^ Cybersecurity and Infrastructure Security Agency. “Known Exploited Vulnerabilities Catalog”.