Microsoft Edge WebView2 support and reporting behavior in Software Vulnerability Manager

When managing vulnerabilities in Software Vulnerability Manager, Microsoft Edge WebView2 may appear differently from standalone applications. Because WebView2 is bundled with the Microsoft Edge browser, its support and vulnerability reporting follow Microsoft’s aggregated reporting model, impacting visibility in Software Vulnerability Manager.

• Microsoft Edge WebView2 does not receive standalone proactive support because it is bundled with the Microsoft Edge browser.
• Security advisories for bundled components are listed under the primary application. Therefore, vulnerabilities impacting WebView2 are included within Microsoft Edge browser security bulletins and are not documented separately. This reflects Microsoft’s standard reporting approach.
• In Software Vulnerability Management (SVM), WebView2 is anchored to the Edge browser and typically appears without a distinct version. As a result, End-of-Life visibility for WebView2 is limited.