Microsoft Edge (Chromium-based) Use-After-Free Vulnerability Leading to Remote Code Execution

A use-after-free vulnerability has been identified in Microsoft Edge (Chromium-based) version 150.0.4078.48. This vulnerability allows an unauthorized attacker to execute code remotely over the network. The issue arises from improper memory management, where the application continues to use a memory resource after it has been freed, creating an opportunity for exploitation.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Reproduction

To reproduce this vulnerability, an attacker must host a specially crafted website designed to exploit the use-after-free condition in Microsoft Edge. The attacker then needs to convince a user to visit the website, which could be done through email, instant messaging, or by sending an attachment that prompts the user to open it.

Remediation

Users can download the security update for Microsoft Edge (Chromium-based) version 150.0.4078.48. For more information, refer to the release notes and security update guidance available on the Microsoft Edge deployment website.