Microsoft Edge Information Disclosure Vulnerability

A vulnerability in Microsoft Edge (Chromium-based) allows unauthorized attackers to disclose information over a network by exploiting external control of file names or paths. This issue could lead to the unauthorized reading of cookies and cached session data, potentially allowing attackers to hijack user accounts on different devices.

Impact

Exploitation of this vulnerability could result in unauthorized access to session cookies, enabling an attacker to impersonate a user by signing into their accounts on another device. Additionally, this vulnerability could allow for a browser sandbox escape.

Remediation

Users are advised to update to the latest version of Microsoft Edge. The security update for this vulnerability is included in Microsoft Edge version 148.0.3967.55.