Microsoft Edge Elevation of Privilege Vulnerability

A vulnerability allowing improper link resolution before file access, known as 'link following', has been identified in Microsoft Edge (Chromium-based). This vulnerability allows an authorized attacker to locally elevate privileges. To exploit this issue, an attacker must log onto the system and run a specially crafted application or convince a local user to open a malicious file. Successful exploitation could grant SYSTEM privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges on the affected machine.

Remediation

Users can apply the official security update available through the Microsoft Edge Updater to address this vulnerability.