1.0 Introduction
Recently, Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.
2.0 Impact
Successful exploitation of these vulnerabilities may allow a remote attacker to trigger remote code execution, denial of service, security restriction bypass, information disclosure, elevation of privilege, spoofing, cross-site scripting and data manipulation on the targeted system. This may lead to execution of arbitrary code, unauthorised access to sensitive information and system compromise when a user visits a specially crafted web page.
3.0 Affected Products
- Microsoft Edge versions prior to 155.0.4283.62
- Microsoft Edge for Android versions prior to 155.0.4283.61
4.0 Recommendations
CyberSecurity Malaysia encourages users and administrators to review the following Microsoft Edge security release notes and apply the necessary updates. Users are advised to update to version 155.0.4283.62 or later (155.0.4283.61 or later on Android). Users can check the version under Settings > About Microsoft Edge and restart the browser after the update.
Kindly refer to the following URL:
- https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security
- https://msrc.microsoft.com/update-guide/
Generally, we advise users to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact Cyber999 Incident Response Centre through the following channels:
E-mail: cyber999[at]cybersecurity.my
Phone: 1-300-88-2999 (monitored during business hours)
Mobile: +60 19 2665850 (24x7 call incident reporting)
Business Hours: Mon - Fri 08:30 -17:30 MYT
Web: https://www.cybersecurity.my
5.0 References
- https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security
- https://msrc.microsoft.com/update-guide/