Microsoft Patches Three Edge Flaws Involving Remote Code Execution and Spoofing Risks

Microsoft Edge is a Chromium-based browser widely used by businesses and individuals. The vulnerabilities could be exploited when a user opens a malicious webpage, potentially allowing arbitrary code execution or the spoofing of trusted content. Researcher Dave Cole discovered the three flaws and reported them to Microsoft through TrendAI ZDI. The patches help reduce cybersecurity risks to endpoints and enterprise environments.

Microsoft recently released security update 148.0.3967.70 for Microsoft Edge, fixing all three vulnerabilities. One remote code execution flaw carries a risk score of 8.8, while the other risks include spoofing. Microsoft advised users to check their browser version promptly and restart Edge to complete the update. The event data did not provide an exact release date, CVE identifiers or the range of affected platforms.