Webview2 109.0.1518.140 New! -

Technical Analysis Report: Microsoft Edge WebView2 Runtime v109.0.1518.140 Report Date: [Current Date] Version Analyzed: 109.0.1518.140 Product Family: Microsoft Edge WebView2 Classification: Stable Channel Release (Legacy)

1. Executive Summary Microsoft Edge WebView2 Runtime version 109.0.1518.140 is a specific, stable-channel release that belongs to a critical transition period in Microsoft’s embedded web technology landscape. This version is notably the last release of WebView2 based on Edge version 109 , which itself holds historical significance as the final version of Microsoft Edge to support Windows 7, Windows 8, and Windows 8.1 . Version 109.0.1518.140 is primarily a security and stability update. Organizations still operating on legacy operating systems (pre-Windows 10) rely on this version chain. However, it lacks modern web platform features introduced in later Chromium-based Edge releases (110+). This report details its technical specifications, security posture, compatibility, known issues, and strategic recommendations.

2. Version Context & Release Timeline | Attribute | Details | |-----------|---------| | Full Version | 109.0.1518.140 | | Corresponding Edge Browser | Microsoft Edge Stable 109.0.1518.140 | | Chromium Base | 109.0.5414.120 (approx.) | | Release Date (WebView2) | Early February 2023 (post-browser release) | | Support Status | Extended support for Windows 7/8.x; Mainstream support ended for Windows 10/11 | | Predecessor | 109.0.1518.78 | | Successor (Major) | 110.0.1587.0 (requires Windows 10+) | Critical Note: Version 109.x is the final WebView2 version supporting:

Windows 7 (with ESU) Windows 8 / 8.1 Windows Server 2012 R2 Windows Server 2016 (Long-Term Servicing Channel) webview2 109.0.1518.140

3. Technical Architecture & Dependencies 3.1 Runtime Components The WebView2 Runtime (109.0.1518.140) is a standalone, redistributable package that provides the following core libraries:

WebView2Loader.dll – Bootstraps the runtime EmbeddedBrowserWebView.dll – Main control interface msedgewebview2.exe – Host process (subprocess architecture) Edge Core binaries – Identical to Edge 109 browser, minus UI shell.

3.2 System Requirements | OS Family | Minimum Version | Supported | |-----------|----------------|------------| | Windows 11 | 21H2 (22000) | ✅ (but obsolete) | | Windows 10 | 1803 (17134) | ✅ | | Windows 8.1 | Update (9600) | ✅ (final version) | | Windows 7 | SP1 (with ESU) | ✅ (final version) | | Windows Server 2016 | 1607 | ✅ | | Windows Server 2019/2022 | All | ✅ | 3.3 API Surface Version Version 109

CoreWebView2 interface version: 1.0.1518.140 Supported Environments : .NET Framework 4.6.1+, .NET Core 3.1+, .NET 5/6/7, WinUI 3, C++, Visual Basic.

4. Security Posture 4.1 CVEs Addressed in 109.0.1518.140 This version is a security update over 109.0.1518.78. It includes fixes for Chromium-derived vulnerabilities from late January/early February 2023. Notable CVE classes patched: | CVE ID | Severity | Type | |--------|----------|------| | CVE-2023-0471 | High | Use after free in WebTransport | | CVE-2023-0472 | High | Type Confusion in V8 | | CVE-2023-0473 | Medium | Inappropriate implementation in Cookies | | CVE-2023-0480 | High | Heap buffer overflow in WebRTC |

Note: No Edge-specific WebView2 CVEs were assigned to this version. Technical Architecture &amp

4.2 Known Unpatched Issues (as of this version)

CVE-2023-2033 (Chromium V8 exploit – fixed in 112+): Not patched in 109.x. CVE-2023-2136 (Skia integer overflow): Not patched. Any Chromium vulnerability disclosed after Feb 14, 2023 remains exploitable in WebView2 109.x on unsupported OS.