Indian Govt Agency CERT-In Issues High Rating Warning Against Microsoft Edge

According to CERT-In, a cyber attacker can exploit these vulnerabilities in Microsoft Edge by sending a specially crafted request to the targeted system.

Indian government agency Computer Emergency Response Team or CERT-In has issued a high-rating security warning for Microsoft Edge users. The security agency has claimed that the Microsoft web browser has numerous security vulnerabilities which could allow an attacker to cause denial of service conditions, remote code, execution, and bypass the security of the device leading to them getting access to all the data on your device.

The reason for these vulnerabilities exist in Microsoft Edge is because of Type Confusion in V8, inappropriate implementation in WebAssembly, out of bounds memory access in Dawn and Use after free in Dawn. According to CERT-In, a cyber attacker can exploit these vulnerabilities by sending a specially crafted request to the targeted system.

The security bulletin released by CERT-In also highlights that this issue affects Edge browser stable versions earlier than 126.0.2592.68. Therefore, if you are using this version of Edge, it is highly recommended to update the browser immediately.

Microsoft Edge Security Risk: How To Safeguard Yourself

Microsoft has already released a security bulletin regarding this issue. We recommend updating the Edge browser on your PC and other devices immediately. To do this, navigate to Microsoft Edge – Help And Feedback – About Microsoft Edge, where the latest version will automatically be installed.

In other news, Microsoft has had to pause the release of the controversial Recall feature on the newly launched Copilot Plus PCs. Concerns about the feature tracking user activities and raising serious privacy issues have led the company to decide to rework the tool before its official launch. The tech giant, has also released its Copilot + PC recently.