CERT-in finds multiple bugs in Microsoft Edge, advises users to update

The Indian Computer Emergency Response Team (CERT-In), which operates under the Ministry of Electronics & Information Technology, issued a warning on Monday about multiple vulnerabilities found in Microsoft Edge (Chromium-based). These vulnerabilities could potentially allow attackers to compromise targeted systems.

The vulnerabilities affect Microsoft Edge Stable versions prior to 125.0.2535.85. Users running these versions are at risk and need to update their software immediately. Found in WebRTC (Web Real-Time Communication), potentially leading to system crashes or allowing attackers to execute arbitrary code.

With this an attacker could exploit these vulnerabilities by convincing a victim to open a specially crafted file, which would trigger the vulnerabilities and potentially allow the attacker to compromise the system.

The vulnerabilities identified in Microsoft Edge (Chromium-based) pose significant security risks if left unaddressed. Users should promptly apply the recommended security updates to protect their systems from potential exploitation. Following best practices for cybersecurity, such as avoiding untrusted files and keeping software up to date, is essential in mitigating these risks

The warning from CERT-In about vulnerabilities in Microsoft Edge highlights the importance of maintaining up-to-date software to protect against cyber threats. Users of Microsoft Edge Stable versions prior to 125.0.2535.85 should update their browsers immediately to mitigate the risk of exploitation.