Microsoft Edge Security Feature Bypass Vulnerability

A vulnerability in Microsoft Edge (Chromium-based) has been identified, allowing an unauthorized attacker to bypass a security feature over the network. This issue arises from improper input validation.

Impact

Exploitation of this vulnerability could lead to a security feature bypass, allowing an authenticated local attacker to disable or enable Windows Virtualization-Based Security (VBS) without administrative privileges. While this does not directly allow code execution as another user, it weakens system security, potentially enabling follow-on attacks.

Remediation

Users are advised to update to the latest version of Microsoft Edge. The security update is available through the Microsoft Edge Update mechanism.