संपादित करें

Preview Runtime 158.0.4370.1 (Nov. 5, 2026)

Release notes for Microsoft Edge WebView2 Preview Runtime, release date: Nov. 5, 2026.

This is a Preview Runtime, for early testing. Prerelease testing of WebView2 SDKs uses a preview channel of Microsoft Edge (Beta, Dev, or Canary), which includes the WebView2 Preview Runtime.

These release notes are for the WebView2 Preview Runtime, which corresponds to the Beta preview channel of Microsoft Edge. We recommend testing your app using the Beta preview channel of Microsoft Edge, before these changes are promoted to Stable. If you want to test even earlier, you can test against Edge Dev or Edge Canary.

See Prerelease testing using preview channels of Microsoft Edge.

In addition to the following WebView2 Runtime improvements, you can also use the new web platform features from Microsoft Edge 158; see Microsoft Edge 158 web platform release notes (Nov. 19, 2026).

Upcoming breaking change: Removing the msAbydosHandwritingAttr WebView2 browser flag

Starting with v159, WebView2 will remove the deprecated msAbydosHandwritingAttr browser flag. After this change, passing msAbydosHandwritingAttr through WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS, registry-based browser arguments, or CoreWebView2EnvironmentOptions.AdditionalBrowserArguments will no longer enable the expected behavior.

For details, see Upcoming breaking change: Removing the msAbydosHandwritingAttr WebView2 browser flag in Runtime 156.0.4314.42 (Oct. 23, 2026).

Upcoming breaking change: Required ACL setup for app-managed WebView2 Fixed Version runtimes on Windows

Starting with v159, WebView2 is strengthening the renderer sandbox for app-managed Fixed Version deployments. Applications that deploy and manage an unpackaged Fixed Version runtime must configure and preserve the required Windows access control list (ACL) entries on the runtime folder during installation, runtime updates, and repair.

For details, see Upcoming breaking change: Required ACL setup for app-managed WebView2 Fixed Version runtimes on Windows in Runtime 156.0.4314.42 (Oct. 23, 2026).

Bug fixes

  • WebView2 now blocks File System Access saves and writes to sensitive paths such as .git\hooks by default. Blocked saves are rejected before SaveFileSecurityCheckStarting and cannot be overridden through that event.
  • WebView2 now accepts only standard drag-and-drop COM packages, and rejects any other package before Windows can load an arbitrary COM class in the WebView2 process.
  • Fixed WebView2 process state in the authentication challenge throttle test.
  • Fixed an issue where calling RemoveHeader in a WebResourceRequested event handler had no effect unless SetHeader was also called.
  • Fixes opaque responses for cross-origin kDenyCors host resources.
  • Stamped the browser-authoritative origin on the Host pipe, to prevent WebMessageReceivedEventArgs.Source spoofing.
  • Deprecated the PPAPI process-kind and process-failure enum values. The values remain available for compatibility, but are no longer emitted, because WebView2 no longer creates PPAPI processes.

See also