Should you update to Microsoft Edge 154.0.4258.53?

From Microsoft Edge updates, in the HARD wiki · Updated
This article is about one Microsoft Edge release. For the latest version, see Microsoft Edge updates.

No: install Microsoft Edge 156.0.4314.58 instead. Microsoft Edge 154.0.4258.53 is a security update Microsoft released on 1 Oct 2026 for Mac and Windows. It fixes 31 security flaws, 1 rated critical and 25 important by Microsoft.[1] None of them is known to be used in attacks.

It has since been replaced by Microsoft Edge 154.0.4258.62, released 5 Oct 2026, which includes all of its fixes. If you’re on an older version, install that instead.

Should you update?

No: install Microsoft Edge 156.0.4314.58 instead. Microsoft Edge 156.0.4314.58 came out on 30 Oct 2026 and includes every fix in Microsoft Edge 154.0.4258.53, so there’s no reason to stop at this one. Software Update offers the newest version your device can run.

Is Microsoft Edge 154.0.4258.53 still safe?

Not any more. The 10 updates since, up to Microsoft Edge 156.0.4314.58, fix 718 security flaws that Microsoft Edge 154.0.4258.53 doesn’t, and each became public the day its fix shipped. Installing it is safe: get it only from Edge’s own About page (Edge updates itself; there’s nothing to download from a website), never from a link in an email, text or pop-up.

What it fixes

Microsoft lists 31 security flaws, 1 rated critical and 25 important by Microsoft.[1] The 26 critical and important ones are:

FlawSeverityWhat Microsoft calls it
CVE-2026-102331CriticalChromium CVE-2026-102331: Buffer overflow
CVE-2026-102299ImportantChromium CVE-2026-102299: Type confusion
CVE-2026-102300ImportantChromium CVE-2026-102300: Uninitialized resource in WebGPU
CVE-2026-102301ImportantChromium CVE-2026-102301: Out of bounds write
CVE-2026-102302ImportantChromium CVE-2026-102302: Buffer overflow
CVE-2026-102303ImportantChromium CVE-2026-102303: Uninitialized resource
CVE-2026-102304ImportantChromium CVE-2026-102304: Use after free
CVE-2026-102306ImportantChromium CVE-2026-102306: Use after free
CVE-2026-102307ImportantChromium CVE-2026-102307: Uninitialized resource
CVE-2026-102308ImportantChromium CVE-2026-102308: Use after free
CVE-2026-102309ImportantChromium CVE-2026-102309: Use after free
CVE-2026-102311ImportantChromium CVE-2026-102311: Uninitialized resource
CVE-2026-102312ImportantChromium CVE-2026-102312: UI misrepresentation
CVE-2026-102313ImportantChromium CVE-2026-102313: Uninitialized resource
CVE-2026-102315ImportantChromium CVE-2026-102315: Uninitialized resource
CVE-2026-102316ImportantChromium CVE-2026-102316: Use after free
CVE-2026-102317ImportantChromium CVE-2026-102317: Improper privilege management
CVE-2026-102318ImportantChromium CVE-2026-102318: Out of bounds read
CVE-2026-102319ImportantChromium CVE-2026-102319: Uninitialized resource
CVE-2026-102321ImportantChromium CVE-2026-102321: Type confusion
CVE-2026-102323ImportantChromium CVE-2026-102323: Type confusion
CVE-2026-102324ImportantChromium CVE-2026-102324: Use after free
CVE-2026-102325ImportantChromium CVE-2026-102325: Uninitialized resource
CVE-2026-102326ImportantChromium CVE-2026-102326: Type confusion
CVE-2026-102328ImportantChromium CVE-2026-102328: Type confusion
CVE-2026-102329ImportantChromium CVE-2026-102329: Cross-site scripting

How to update, and how long it takes

A minute or two. Edge restarts and reopens your tabs.

  1. Open Edge and click the three dots (…) at the top right.Choose Help and feedback, then About Microsoft Edge.
  2. Let it download the update.Edge checks as soon as that page opens. When it’s done, click Restart.

To check it worked: Three dots (…) → Help and feedback → About Microsoft Edge: the version is under the name, e.g. 157.0.4341.42. It should say 154.0.4258.62 or later.

154.0.4258.48 vs 154.0.4258.53

Microsoft Edge 154.0.4258.48, released 29 Sep 2026, fixed 2 security flaws. Microsoft Edge 154.0.4258.53 fixes 31 security flaws and includes the fixes before it, so going straight to 154.0.4258.53 gets you both.

References

  1. ^ Microsoft. “Microsoft Edge security release notes, October 01, 2026”, 1 Oct 2026.