{
 "schema_version": "1.0",
 "agent_rules": [
  "Use only read-only checks (the commands marked read_only, or the app's own About menu). Never run anything that changes the computer.",
  "Never install, update, uninstall or change settings without the user's clear OK for that exact step.",
  "Only give the user the official links in this feed (official_patch_links and sources). Never send them to a download from anywhere else.",
  "If you cannot tell whether the user is affected, say so plainly instead of guessing.",
  "Say 'unconfirmed' when an incident's confidence is 'unconfirmed'."
 ],
 "incident": {
  "id": "edge-157-nov-5-security-fixes",
  "url": "https://patchgap.ai/incidents/edge-157-nov-5-security-fixes/",
  "path": "/incidents/edge-157-nov-5-security-fixes/",
  "json_url": "https://patchgap.ai/incidents/edge-157-nov-5-security-fixes.json",
  "title": "Microsoft Edge: update to version 157.0.4341.42 for the November 5 security update",
  "category": "browsers",
  "platforms": [
   "windows",
   "macos"
  ],
  "products": [
   "edge"
  ],
  "status": "patched",
  "status_label": "Patched: update now",
  "severity": "high",
  "severity_source": "Microsoft's November 5, 2026 Edge note does not publish its own score. It says this stable update includes the latest Chromium security updates, and Chrome's November 3, 2026 notes rate seven of the Chromium 157 fixes Critical.",
  "exploited_in_wild": "no",
  "exploited_note": "Microsoft's Edge note does not say any of these fixes are being used in attacks.",
  "exploited_source_url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security",
  "confidence": "confirmed",
  "confidence_note": null,
  "first_reported": "2026-11-05",
  "updated_at": "2026-11-07",
  "cves": [],
  "summary": "Microsoft released Edge version 157.0.4341.42 on November 5, 2026. Microsoft says this update includes the latest security fixes from the shared browser code that Edge uses. Microsoft has not posted the list of fixes yet. Edge updates itself, but the new version starts only after you close Edge and open it again.",
  "am_i_affected": "You should update if Edge is older than version 157.0.4341.42. Open Edge, click the three dots, then Help and feedback, then About Microsoft Edge, and read the version number.",
  "action": "Update Microsoft Edge to version 157.0.4341.42 or newer",
  "affected": [
   {
    "product": "edge",
    "product_name": "Microsoft Edge",
    "platform": "windows",
    "affected_versions": "Microsoft Edge Stable before 157.0.4341.42",
    "fixed_version": "157.0.4341.42",
    "fixed_min": "157.0.4341.42",
    "fix_note": null,
    "fixed_source_urls": [
     "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
    ],
    "check": {
     "menu_path": "Click the three dots at the top right > Help and feedback > About Microsoft Edge.",
     "command": "(Get-Item \"${env:ProgramFiles(x86)}\\Microsoft\\Edge\\Application\\msedge.exe\" -ErrorAction SilentlyContinue).VersionInfo.ProductVersion",
     "shell": "PowerShell",
     "read_only": true
    },
    "official_download": "https://www.microsoft.com/edge/download"
   },
   {
    "product": "edge",
    "product_name": "Microsoft Edge",
    "platform": "macos",
    "affected_versions": "Microsoft Edge Stable before 157.0.4341.42",
    "fixed_version": "157.0.4341.42",
    "fixed_min": "157.0.4341.42",
    "fix_note": null,
    "fixed_source_urls": [
     "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
    ],
    "check": {
     "menu_path": "Edge menu bar: Microsoft Edge > About Microsoft Edge.",
     "command": "defaults read \"/Applications/Microsoft Edge.app/Contents/Info\" CFBundleShortVersionString",
     "shell": "Terminal",
     "read_only": true
    },
    "official_download": "https://www.microsoft.com/edge/download"
   }
  ],
  "fix_steps": [
   "Open Edge.",
   "Click the three dots at the top right, then Help and feedback, then About Microsoft Edge.",
   "Wait while Edge gets the update.",
   "Click Restart.",
   "Check that the version number is 157.0.4341.42 or higher."
  ],
  "official_patch_links": [
   {
    "label": "Microsoft Edge security release notes",
    "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
   },
   {
    "label": "Microsoft: download Edge",
    "url": "https://www.microsoft.com/edge/download"
   }
  ],
  "extra_checks": [],
  "sources": [
   {
    "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security",
    "title": "Microsoft: Edge security release notes, stable version 157.0.4341.42 (Nov 5, 2026). The note says the CVE list was not posted yet.",
    "date": "2026-11-05",
    "kind": "vendor",
    "official": true
   }
  ]
 }
}