Microsoft Edge Defense in Depth Vulnerability

A defense in depth vulnerability has been identified in Microsoft Edge (Chromium-based) version 146.0.3856.84. This vulnerability requires user interaction to be exploited, as an attacker must craft a specific URL for the user to click on. While the vulnerability has a low impact on confidentiality and integrity, it does not affect availability.

Impact

Exploitation of this vulnerability could lead to unauthorized viewing of sensitive information and the ability to make minor alterations to such information.

Remediation

Users are advised to update to the latest version of Microsoft Edge. The security update is available through the Microsoft Edge Update mechanism.