diff --git a/Cargo.lock b/Cargo.lock
index 31677c464..1ef29f561 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -9077,6 +9077,7 @@ version = "0.1.0"
 dependencies = [
  "base64 0.22.1",
  "cef",
+ "cef-dll-sys",
  "dirs 6.0.0",
  "gtk",
  "html5ever",
diff --git a/cef-helper/Cargo.toml b/cef-helper/Cargo.toml
index 00f9641c3..d75f83d59 100644
--- a/cef-helper/Cargo.toml
+++ b/cef-helper/Cargo.toml
@@ -6,7 +6,9 @@ license = "Apache-2.0 OR MIT"
 publish = false
 
 [dependencies]
-cef = { version = "144.1.0", default-features = false }
+cef = { version = "=144.1.0+144.0.7", default-features = false }
+# Not actually used directly, just locking it.
+cef-dll-sys = { version = "=144.1.0+144.0.7", default-features = false }
 
 [features]
 default = ["sandbox"]
diff --git a/crates/tauri-runtime-cef/Cargo.toml b/crates/tauri-runtime-cef/Cargo.toml
index 5c53cd3d9..a3c03b6e5 100644
--- a/crates/tauri-runtime-cef/Cargo.toml
+++ b/crates/tauri-runtime-cef/Cargo.toml
@@ -18,7 +18,10 @@ html5ever = "0.29"
 raw-window-handle = "0.6"
 url = "2"
 http = "1"
-cef = "144.1.0"
+# ideally we could lock on metadata but cargo ignores that
+cef = "=144.1.0"
+# Not actually used directly, just locking it.
+cef-dll-sys = "=144.1.0"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 kuchiki = { package = "kuchikiki", version = "0.8.8-speedreader" }